Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'EDMComp' = '%APPDATA%\EDMComp\Uedit64.exe'
- %APPDATA%\EDMComp\Uedit64.exe
- %APPDATA%\EDMComp\Uedit64.exe
- 'ro###or.com8.tw':443
- DNS ASK ro###or.com8.tw
- ClassName: 'Indicator' WindowName: ''