Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{18F424C5-350C-5064-FED8-DA8CAE4C8676}] 'stubpath' = ''
- %WINDIR%\Explorer.EXE
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- <SYSTEM32>\botnet$$\server.exe
- %APPDATA%\addons.dat
- %APPDATA%\addons.dat
- <SYSTEM32>\botnet$$\server.exe
- 'ab#####am1.no-ip.biz':81
- 'ab####sam.no-ip.biz':81
- DNS ASK ab#####am1.no-ip.biz
- DNS ASK ab####sam.no-ip.biz