Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\ط?ظٹط±ظپط±.exe' = '%TEMP%\ط³ظٹط±ظپط±.exe:*:Enabled:ط³ظٹط±ظپط±.exe'
- '%TEMP%\ط?ظٹط±ظپط±.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\ط?ظٹط±ظپط±.exe" "ط?ظٹط±ظپط±.exe" ENABLE
- %TEMP%\ط?ظٹط±ظپط±.exe
- 'da#####amer.no-ip.biz':1177
- DNS ASK da#####amer.no-ip.biz