Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'UserLog' = '%WINDIR%\append.exe'
- %WINDIR%\appcmd.exe.tmp
- C:\wrpext1383-donotdeleteormodifythisfileplease.exe
- C:\wrpext1383-donotdeleteormodifythisfileplease.exe
- %WINDIR%\appcmd.exe.tmp