Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{E3C5EAD0-BAA1-515D-8EE3-6F489E436977}] 'stubpath' = ''
- %HOMEPATH%\Templates\wTSub.exe.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\bjondina\server.exe
- %HOMEPATH%\Templates\wTSub.exe.exe
- 'localhost':81
- 'sh####.no-ip.org':81
- DNS ASK sh####.no-ip.org