Техническая информация
- '%APPDATA%\Spark Now\sparkwb.exe'
- '%APPDATA%\Spark Now\sparkwb.exe' -notray
- '<SYSTEM32>\reg.exe' ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Spark 2 /t REG_SZ /d "%APPDATA%\Spark Now\sparkwb.exe -notray" /f
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\DUNTLBMF.bat" "
- '<SYSTEM32>\ipconfig.exe'
- <SYSTEM32>\ipconfig.exe
- opera.exe
- safari.exe
- firefox.exe
- chrome.exe
- %TEMP%\DUNTLBMF.bat
- %APPDATA%\Spark Now\sparkwb.exe
- %TEMP%\~DF3E83.tmp
- %TEMP%\~DF1A13.tmp