Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\a4f53939b8b3cf5e7b1336fe24ad690f.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\ssschost.exe' = '%TEMP%\ssschost.exe:*:Enabled:ssschost.exe'
- '%TEMP%\ssschost.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\ssschost.exe" "ssschost.exe" ENABLE
- %TEMP%\ssschost.exe
- 'ne####rk.linkpc.net':3131
- DNS ASK ne####rk.linkpc.net