Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Updataor Serivces' = '"<SYSTEM32>\DumpUperRs.mov" /service'
- '<SYSTEM32>\DumpUperRs.mov' /service
- <SYSTEM32>\DumpUperRs.dat
- <SYSTEM32>\DumpUperRs.mov
- 'wy###7.xicp.net':10080
- DNS ASK wy###7.xicp.net
- ClassName: 'Indicator' WindowName: '(null)'