Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'msgpluss' = '<SYSTEM32>:msgpluss.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{94D532CF-ECDC-2CDA-4B9B-ADA78462B2E7}] 'StubPath' = '<SYSTEM32>:msgpluss.exe'
- <SYSTEM32>:msgpluss.exe
- 'nm#####aster.no-ip.biz':44644
- DNS ASK nm#####aster.no-ip.biz