Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '*aJd6Xzi' = ''
- <SYSTEM32>\rundll32.exe "%HOMEPATH%\Local Settings\vHlXtuOZ\ogZQmz8S.JQz",HFF8
- <SYSTEM32>\cscript.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\ctfmon.exe
- <SYSTEM32>\rundll32.exe
- %HOMEPATH%\Local Settings\vHlXtuOZ\e082CPeWfePev33hWveCpv3R3W3.ZJ1
- %HOMEPATH%\Local Settings\vHlXtuOZ\e082CPeWfvPev33hWveCp3Ce3_K.ZJ1
- %HOMEPATH%\Local Settings\vHlXtuOZ\fW-YDsLn.FYs
- %HOMEPATH%\Local Settings\vHlXtuOZ\ogZQmz8S.JQz
- %HOMEPATH%\Local Settings\vHlXtuOZ\kepR8Go9.qRG
- ClassName: 'Indicator' WindowName: ''