Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{D47E890B-0D82-8F89-982D-AADD496F8C80}] 'StubPath' = '%TEMP%\Poi1234.exe'
- '%TEMP%\Poi1234.exe'
- %TEMP%\Poi1234.exe
- %TEMP%\Poi1234.exe.nb5.tmp
- %TEMP%\Poi1234.exe.nb5.tmp
- 'an#####a811.no-ip.biz':1234
- DNS ASK an#####a811.no-ip.biz