Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{N1AUQ-4GFWQP1-J8WTW-VDML96-7HDCNAJP0}] 'StubPath' = '%WINDIR%\DarkCoderSc.exe Restart'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IAm-Internet Explorer' = '%WINDIR%\DarkCoderSc.exe'
- %WINDIR%\DarkCoderSc.exe
- 'sa####07.no-ip.biz':1604
- DNS ASK sa####07.no-ip.biz
- '<IP-адрес в локальной сети>':1033