Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{5EDC6229-DE3A-3D76-B331-9296DE02BC11}] 'StubPath' = '"%TEMP%\File2.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{85B63D9A-A7A1-50B7-BA73-B1C6A2D86F6B}] 'stubpath' = ''
- %WINDIR%\Explorer.EXE
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %APPDATA%\addons.dat
- <SYSTEM32>\Bifrost\Server.exe
- %TEMP%\File1.exe
- %TEMP%\File2.exe
- %APPDATA%\addons.dat
- <SYSTEM32>\Bifrost\Server.exe
- 'xx####.no-ip.biz':3460
- DNS ASK xx####.no-ip.biz