Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Scandal' = '"%APPDATA%\Microsoft\Scandal.exe"'
- '%APPDATA%\Microsoft\Scandal.exe'
- %APPDATA%\Microsoft\Scandal.exe
- 'ma######.chickenkiller.com':20000
- DNS ASK ma######.chickenkiller.com
- ClassName: 'Indicator' WindowName: ''