Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{25A02C31-ECB1-15DE-0203-040500050101}] 'StubPath' = '<SYSTEM32>\thunteWS_98.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\thunteWS_98.exe
- 'ch####o2.no-ip.org':3460
- 'ch####o.no-ip.org':3460
- DNS ASK ch####o2.no-ip.org
- DNS ASK ch####o.no-ip.org