Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\oreans32] 'Start' = '00000001'
- %WINDIR%\cool.exe
- ClassName: 'pediy06' WindowName: ''
- ClassName: 'GBDYLLO' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- %WINDIR%\cool.exe
- %WINDIR%\cool.exe
- 'er####.no-ip.biz':6611
- DNS ASK er####.no-ip.biz