Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Communication] 'ImagePath' = '%ProgramFiles%\Communication\signal.exe -k'
- [<HKLM>\SYSTEM\ControlSet001\Services\Communication] 'Start' = '00000002'
- '%ProgramFiles%\Communication\signal.exe' -k
- '<SYSTEM32>\wscript.exe' "<Текущая директория>\tem.vbs"
- <Текущая директория>\tem.vbs
- %ProgramFiles%\Communication\signal.exe
- 'Co#####cation.6ssf.com':1233
- DNS ASK Co#####cation.6ssf.com
- ClassName: 'Shell_TrayWnd' WindowName: ''