Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'has.exe' = '<SYSTEM32>\has.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{1124398B-2FC1-01CC-DF8D-74DE456C3CAD}] 'StubPath' = '<SYSTEM32>\has.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\has.exe
- 'ha####24.no-ip.org':5555
- DNS ASK ha####24.no-ip.org