Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Klass' = '%WINDIR%\Svchost2.exe'
- %WINDIR%\Svchost2.exe
- %WINDIR%\Svchost2.exe
- %WINDIR%\Main.dat
- %WINDIR%\dir
- %WINDIR%\name
- %TEMP%\~DFE94C.tmp
- 'ne####y.no-ip.org':5252
- DNS ASK ne####y.no-ip.org
- ClassName: 'Indicator' WindowName: ''