Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xxx.exe' = '"%TEMP%\xxx.exe"'
- %WINDIR%\LSSrcv.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\xxx.exe
- %TEMP%\xxx.exe
- %WINDIR%\LSSrcv.exe
- %TEMP%\sirius.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\xxx.exe
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Indicator' WindowName: ''