Техническая информация
- '%APPDATA%\Roaming\DRCTROY.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\Roaming\DRCTROY.exe" "DRCTROY.exe" ENABLE
- %APPDATA%\Roaming\DRCTROY.exe
- '11####chh.no-ip.biz':668
- DNS ASK dn#.##ftncsi.com
- DNS ASK 11####chh.no-ip.biz