Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Getdo' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Winset' = '%APPDATA%\Adobe\Update\mmcicm.exe'
- <SYSTEM32>\shutdown.exe -r
- %WINDIR%\Explorer.EXE
- %APPDATA%\Adobe\Update\flacor.dat
- %APPDATA%\Adobe\Update\mmcicm.exe
- 'gi##k.net':80
- gi##k.net/
- DNS ASK gi##k.net
- ClassName: 'Indicator' WindowName: ''