Техническая информация
- <SYSTEM32>\fktrfo.exe 300 "%TEMP%\rBot.exe"
- %TEMP%\rBot.exe
- %TEMP%\server.exe
- [<HKCU>\Software\Paltalk]
- [<HKCU>\Software\Google\Google Talk\Accounts]
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: 'gdkWindowToplevel' WindowName: ''
- <SYSTEM32>\fktrfo.exe
- %TEMP%\rBot.exe
- %TEMP%\server.exe
- <SYSTEM32>\fktrfo.exe
- %TEMP%\rBot.exe
- 'th#####ticed.dyndns.biz':4200
- DNS ASK th#####ticed.dyndns.biz
- ClassName: 'mIRC' WindowName: ''