Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '247c47071909c20b1e52796220463366' = '"%TEMP%\tachfra.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '247c47071909c20b1e52796220463366' = '"%TEMP%\tachfra.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\247c47071909c20b1e52796220463366.exe
- '%TEMP%\tachfra.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\tachfra.exe" "tachfra.exe" ENABLE
- %TEMP%\tachfra.exe
- DNS ASK al####.no-ip.biz
- ClassName: 'Indicator' WindowName: '(null)'