Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'a9a5e3251b9a60dbcb23950528017a09' = '"%TEMP%\fh clan.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a9a5e3251b9a60dbcb23950528017a09' = '"%TEMP%\fh clan.exe" ..'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\fh clan.exe' = '%TEMP%\fh clan.exe:*:Enabled:fh clan.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\fh clan.exe" "fh clan.exe" ENABLE
- '%TEMP%\fh clan.exe'
- %TEMP%\fh clan.exe
- 'xx#####x22.hopto.org':22003
- DNS ASK xx#####x22.hopto.org