Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XpertRAT' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'XpertRAT' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{G5V6A3G7-F008-M4H4-L2M4-D6G110G0P2D0}] 'StubPath' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RUNSERVICES] 'Server' = '%WINDIR%\XpertRAT\Server.exe'
- Средство контроля пользовательских учетных записей (UAC)
- %WINDIR%\XpertRAT\Server.exe
- %WINDIR%\XpertRAT\Server.exe
- %WINDIR%\XpertRAT\Server.exe
- 'ma####009.no-ip.org':666
- DNS ASK ma####009.no-ip.org
- ClassName: 'Indicator' WindowName: ''