Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'TCP Service' = '%PROGRAM_FILES%\TCP Service\tcpsv.exe'
- %PROGRAM_FILES%\TCP Service\tcpsv.exe
- %APPDATA%\Roaming\FDAAD129-04DF-4089-BB80-174CE725F721\run.dat
- 'fa####nfoto.noip.me':9033
- DNS ASK dn#.##ftncsi.com
- DNS ASK fa####nfoto.noip.me