Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'msn.exe' = '<SYSTEM32>\explorer.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{88532217-57F3-A8F1-1664-C2FBFB08AC09}] 'StubPath' = '<SYSTEM32>\explorer.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\explorer.exe
- 'da####.no-ip.biz':3460
- DNS ASK da####.no-ip.biz