Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{31741F5D-8D07-5406-F547-C592CC41A53C}] 'stubpath' = ''
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- %APPDATA%\system32\svchost.exe
- %APPDATA%\addon.dat
- <SYSTEM32>\svchost.exe
- 'localhost':22035
- 'cl###.no-ip.biz':22035
- DNS ASK cl###.no-ip.biz