Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MSCTFORM' = '%ALLUSERSPROFILE%\PotPlayer\svchosts.exe'
- '%ALLUSERSPROFILE%\PotPlayer\svchosts.exe'
- %ALLUSERSPROFILE%\PotPlayer\demo.dat
- %ALLUSERSPROFILE%\PotPlayer\PotPlayer.dll
- %ALLUSERSPROFILE%\PotPlayer\svchosts.exe
- 'fo####ll.ddns.ms':53
- DNS ASK fo####ll.ddns.ms