Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'produpd' = '"%APPDATA%\VDI\Shared\Product Updater\produpd.exe" '
- %HOMEPATH%\Start Menu\Programs\Startup\monhost.lnk
- %APPDATA%\VDI\Shared\Product Updater\27b8bba30a4c3db21747b08ec2755e0a.exe
- %APPDATA%\VDI\Shared\Product Updater\92a2a9a12991426d060e0c111bf59c82.exe
- %TEMP%\nsi2.tmp
- %APPDATA%\VDI\Shared\Product Updater\27b8bba30a4c3db21747b08ec2755e0a.exe в %APPDATA%\VDI\Shared\Product Updater\monhost.exe
- %APPDATA%\VDI\Shared\Product Updater\92a2a9a12991426d060e0c111bf59c82.exe в %APPDATA%\VDI\Shared\Product Updater\produpd.exe