Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System.exe' = '"%WINDIR%\baboy.exe"'
- '%WINDIR%\baboy.exe'
- '%HOMEPATH%\Local Settings\Tempserver.exe'
- %WINDIR%\baboy.exe
- %HOMEPATH%\Local Settings\Tempserver.exe
- 'ha####02.no-ip.biz':1515
- DNS ASK ha####02.no-ip.biz