Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '0bf9ac8773b304127209bd4df7feae32' = '"%APPDATA%\admkklre.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0bf9ac8773b304127209bd4df7feae32' = '"%APPDATA%\admkklre.exe" ..'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\admkklre.exe' = '%APPDATA%\admkklre.exe:*:Enabled:admkklre.e...
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\admkklre.exe" "admkklre.exe" ENABLE
- '%APPDATA%\admkklre.exe'
- %APPDATA%\admkklre.exe
- 'aj########kjea.freedynamicdns.net':5553
- DNS ASK aj########kjea.freedynamicdns.net