Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'adobeshockwave' = '<SYSTEM32>\adobeshockwave.exe'
- <SYSTEM32>\adobeshockwave.exe
- <SYSTEM32>\sys32data.txt
- 'be######one.altervista.org':21
- DNS ASK be######one.altervista.org
- ClassName: 'ConsoleWindowClass' WindowName: ''