Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\PPTVService] 'Start' = '00000002'
- %PROGRAM_FILES%\R_Server\RemoteAbc.exe
- %TEMP%\67320474.tmp
- %TEMP%\67320474.tmp в %PROGRAM_FILES%\R_Server\RemoteAbc.exe
- 'fe###.zapto.org':7065
- DNS ASK fe###.zapto.org
- ClassName: '' WindowName: '???????? ????'
- ClassName: '' WindowName: '????????????'
- ClassName: '' WindowName: '????????????????'