Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{875B884B-32FB-04D8-78EE-374CA2350E58}] 'StubPath' = '%APPDATA%\TABCTCHS.exe'
- %APPDATA%\TABCTCHS.exe
- %APPDATA%\TABCTCHS.exe
- 'po##.#estcowboy.com':443
- DNS ASK po##.#estcowboy.com