Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{AA879740-00AB-5F8D-4EDC-8B875C2CCFE3}] 'StubPath' = '<SYSTEM32>\spnpinnst.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\spnpinnst.exe
- 'wo####x.no-ip.biz':3343
- DNS ASK wo####x.no-ip.biz