Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ZDF2376712462AWrt2376712462AdsWrt2376712462aAdsWrtenZDF2376712462_23767124620' = '%HOMEPATH%\2376712462\2376712462.EXE'
- <SYSTEM32>\reg.exe aDd HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v ZDF2376712462AWrt2376712462AdsWrt2376712462aAdsWrtenZDF2376712462_23767124620 /d "%HOMEPATH%\2376712462\2376712462.EXE" /f
- <SYSTEM32>\shutdown.exe /r /T 5 /f
- %HOMEPATH%\2376712462\2376712462.EXE
- ClassName: 'Indicator' WindowName: ''