Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'photo2' = '%APPDATA%\photo2.exe'
- '%APPDATA%\photo2.exe'
- %APPDATA%\photo2.exe
- 'th####o22.no-ip.org':1604
- DNS ASK th####o22.no-ip.org
- ClassName: 'Indicator' WindowName: '(null)'