Техническая информация
- [<HKCU>\Software\Microsoft\Active Setup\Installed Components\{6E38AD15-9BE3-69CF-370C-147AD148AD14}] 'StubPath' = '"<LS_APPDATA>\coolserver.exe" s'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'coolserver' = '"<LS_APPDATA>\coolserver.exe" s'
- <LS_APPDATA>\coolserver.exe
- <LS_APPDATA>\coolserver.exe
- <LS_APPDATA>\coolserver.exe
- 'jb##.no-ip.biz':77
- DNS ASK jb##.no-ip.biz
- ClassName: 'Indicator' WindowName: ''