Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'jHe96Qm' = '%HOMEPATH%\pUy44Nr\jusched.exe'
- %HOMEPATH%\kLv51Mh.GA3
- %TEMP%\aut1.tmp
- %HOMEPATH%\kLv51Mh.GA3
- %HOMEPATH%\kLv51Mh.GA3
- %TEMP%\aut1.tmp
- 'bo####n.no-ip.org':81
- DNS ASK bo####n.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'