Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSUPD32' = '%APPDATA%\wuaclt.exe'
- %APPDATA%\wuaclt.exe
- %APPDATA%\wuaclt.exe
- 'pi#####.myownsecondpc.com':80
- pi#####.myownsecondpc.com/picture001.jpg
- DNS ASK pi#####.myownsecondpc.com
- ClassName: 'Indicator' WindowName: ''