Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Ares' = '%WINDIR%:calclog.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{10F52574-8FC1-A8FB-B328-1C6C639819DD}] 'StubPath' = '%WINDIR%:calclog.exe'
- %WINDIR%\Explorer.EXE
- iexplore.exe
- %WINDIR%:calclog.exe
- 'ma#####tos.no-ip.org':80
- DNS ASK ma#####tos.no-ip.org