Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicrosoftWebServerUpdater.exe' = '%WINDIR%\webserver.exe'
- %WINDIR%\webserver.exe
- <SYSTEM32>\taskkill.exe /F /IM SkypePM.exe
- <SYSTEM32>\taskkill.exe /F /IM Skype.exe
- <SYSTEM32>\cmd.exe /c C:\1.bat
- skype.exe
- %WINDIR%\webserver.exe
- C:\1.bat
- %WINDIR%\Index.html
- %WINDIR%\1.bmp
- %WINDIR%\12.bmp
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''