Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'jajajajdjeffga' = '"%WINDIR%\serveeerr.exe"'
- '%WINDIR%\serveeerr.exe'
- ClassName: 'pediy06' WindowName: '(null)'
- ClassName: 'GBDYLLO' WindowName: '(null)'
- ClassName: 'OLLYDBG' WindowName: '(null)'
- %WINDIR%\serveeerr.exe
- 'an######at1992.no-ip.biz':9999
- DNS ASK an######at1992.no-ip.biz