Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{7CA2F4ED-8CE8-641D-5495-3018052E8E35}] 'StubPath' = '<SYSTEM32>:winms.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>:winms.exe
- 'ti####6.no-ip.biz':3460
- DNS ASK ti####6.no-ip.biz