Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winsvr] 'Logon' = 'exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winsvr] 'DLLName' = ''
- '<SYSTEM32>\rundll32.exe' %WINDIR%\system\winsvr.dll,exe
- '<SYSTEM32>\rundll32.exe' %WINDIR%\system\winsvr.dll,install
- %WINDIR%\system\winsvr.dll
- 'de#####43.dyndns.org':443
- DNS ASK de#####43.dyndns.org