Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\18a02f5ab75a6a86f28edad2a5c4a9b1.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%HOMEPATH%\csrs.exe' = '%HOMEPATH%\csrs.exe:*:Enabled:csrs.exe'
- '%HOMEPATH%\csrs.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%HOMEPATH%\csrs.exe" "csrs.exe" ENABLE
- %HOMEPATH%\csrs.exe
- 'my###.no-ip.biz':1922
- DNS ASK my###.no-ip.biz