Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '350b6ba1adccc98369c0a1dbc48f1a60' = '"%TEMP%\skyper.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '350b6ba1adccc98369c0a1dbc48f1a60' = '"%TEMP%\skyper.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\350b6ba1adccc98369c0a1dbc48f1a60.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\skyper.exe' = '%TEMP%\skyper.exe:*:Enabled:skyper.exe'
- '%TEMP%\skyper.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\skyper.exe" "skyper.exe" ENABLE
- %TEMP%\skyper.exe
- 'hs#####vhl.no-ip.biz':5552
- DNS ASK hs#####vhl.no-ip.biz
- ClassName: 'Indicator' WindowName: '(null)'