Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kwL4ZK5JM5' = '%ALLUSERSPROFILE%\HnVTsbdZZmPvt0\f2jvYIfA4Rb4F8.exe'
- %ALLUSERSPROFILE%\HnVTsbdZZmPvt0\f2jvYIfA4Rb4F8.exe
- %ALLUSERSPROFILE%\HnVTsbdZZmPvt0\RCX1.tmp
- %ALLUSERSPROFILE%\HnVTsbdZZmPvt0\f2jvYIfA4Rb4F8.exe
- %ALLUSERSPROFILE%\HnVTsbdZZmPvt0\f2jvYIfA4Rb4F8.exe
- ClassName: 'Indicator' WindowName: ''