Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{E22B27AB-6E9F-707F-6318-852041D624A8}] 'stubpath' = ''
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\microsoft.net\barba.exe
- %APPDATA%\addons.dat
- %APPDATA%\addons.dat
- <SYSTEM32>\microsoft.net\barba.exe
- 'al#####ir1.zapto.org':2000
- DNS ASK al#####ir1.zapto.org