Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'tcdrz32' = '<SYSTEM32>\tcdrz32.exe'
- '<SYSTEM32>\tcdrz32.exe'
- <SYSTEM32>\hlcst.tct
- <SYSTEM32>\tcdrz32.exe
- <SYSTEM32>\tcdrz32.exe
- %TEMP%\~DF2ED1.tmp
- 'al###ypt.com':21
- DNS ASK al###ypt.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'