Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ctfnom' = '%APPDATA%\Dir\ctfnom.exe'
- %APPDATA%\Dir\ctfnom.exe
- %APPDATA%\Dir\Dated.dat
- %APPDATA%\Dir\ctfnom.exe
- %TEMP%\~DFAC20.tmp
- 'ma####.no-ip.biz':2185
- DNS ASK ma####.no-ip.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''