Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows' = '%TEMP%\Windows .exe'
- %TEMP%\svhost.exe
- %TEMP%\svhost.exe
- %TEMP%\Windows .exe
- %TEMP%\Windows .exe
- 'ka####.no-ip.biz':1604
- DNS ASK ka####.no-ip.biz
- ClassName: 'Indicator' WindowName: ''