Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,<SYSTEM32>\mstap32.exe'
- %WINDIR%\pdoor.exe
- %TEMP%\dbg.txt
- 'fr##8s.info':80
- 'fr##8s.info':7022
- fr##8s.info/pdoor.exe
- DNS ASK 1.###.##1.111.in-addr.arpa
- DNS ASK fr##8s.info