Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{9B6D3E95-5AAF-D3DB-C235-7BB88DBC94C9}] 'stubpath' = ''
- %WINDIR%\explorer.exe
- <SYSTEM32>\svchost.exe
- ClassName: 'OLLYDBG' WindowName: ''
- %PROGRAM_FILES%\win32\winhost.exe
- %APPDATA%\addon.dat
- %APPDATA%\addon.dat
- %PROGRAM_FILES%\win32\winhost.exe
- 'bn##.no-ip.org':81
- DNS ASK bn##.no-ip.org