Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV53.3424' = '%WINDIR%\winbac.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV57.95186' = '<SYSTEM32>\winbac.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV28.95625' = '<Полный путь к вирусу>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV57.95186' = '%WINDIR%\winbac.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV28.95625' = '<SYSTEM32>\winbac.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV57.95186' = '<Полный путь к вирусу>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV70.55475' = '<SYSTEM32>\winbac.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV70.55475' = '<Полный путь к вирусу>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV53.3424' = '<Полный путь к вирусу>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV70.55475' = '%WINDIR%\winbac.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABKV53.3424' = '<SYSTEM32>\winbac.exe'
- %WINDIR%\winbac.exe
- <SYSTEM32>\winbac.exe kubvopen
- <SYSTEM32>\winbac.exe
- <SYSTEM32>\animat.scr
- %WINDIR%\winbac.exe