Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TpScrex' = 'C:\ProgramData\TpScrex\TpScrex.exe /somering'
- <SYSTEM32>\cmd.exe /c "%TEMP%\install.bat"
- %TEMP%\install.bat
- 'bo###car.com':1472
- 'localhost':1035
- DNS ASK bo###car.com
- ClassName: 'Indicator' WindowName: ''