Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '<SYSTEM32>\server.exe'
- bdagent.exe
- outpost.exe
- <SYSTEM32>\server.exe
- <LS_APPDATA>\MicrosoftWindows\server.exe_Url_f3pm3leuwj13ybprcwn2ycwgu1erslzf\1.0.0.0\5dehyake.newcfg
- %TEMP%\250 Adet Seffaf Sembol.7z
- %TEMP%\server.exe
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''