Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Ias] 'Start' = '00000002'
- C:\RECYCLER\recyl.exe206796tem.exe
- C:\RECYCLER\recyl.exe /c c:\recycler\recyl.exere.bat
- C:\RECYCLER\recyl.exe /c copy /b c:\recycler\recyl.exe206796tem.exe3.txt+c:\recycler\recyl.exe206796cnna.txt c:\recycler\recyl.exe206796tem.exe
- C:\RECYCLER\recyl.exe /cc:\recycler\recyl.exe206796tem.exe
- %WINDIR%\regedit.exe /s c:\recycler\recyl.execyl.txt
- C:\RECYCLER\recyl.execyl.txt
- C:\RECYCLER\recyl.exe241656cnna.txt
- C:\RECYCLER\recyl.exere.bat
- <SYSTEM32>\Iasid.dll.right.tlb
- <SYSTEM32>\Iasid.dll.move.tlb
- C:\RECYCLER\recyl.exe206796cnna.txt
- C:\RECYCLER\recyl.exe
- C:\RECYCLER\recyl.exe206796tem.exe3.txt
- C:\RECYCLER\recyl.exetem.tem
- C:\RECYCLER\recyl.exe206796tem.exe
- C:\RECYCLER\recyl.exe206796cnna.txt
- C:\RECYCLER\recyl.exe241656cnna.txt в <SYSTEM32>\Iasid.dll