Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'abd815286ba1007abfbb8415b83ae2cf' = '%ALLUSERSPROFILE%\Application Data\Default.exe'
- [<HKCU>\Software\Paltalk]
- %ALLUSERSPROFILE%\Application Data\Default.exe
- '0w##r.me':80
- 'wp#d':80
- 0w##r.me/1248n7129478n21/post.php?ty##########################################################
- wp#d/wpad.dat
- DNS ASK 0w##r.me
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: ''