Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ueYRXrnl\' = '%APPDATA%\ueYRXrnl\WkObMrEP.exe'
- '<SYSTEM32>\notepad.exe' 144 "%APPDATA%\ueYRXrnl\WkObMrEP.exe"
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe'
- <SYSTEM32>\notepad.exe
- ClassName: 'TibiaClient', WindowName: ''
- %TEMP%\YOdtcCvUZm.txt
- %APPDATA%\ueYRXrnl\WkObMrEP.exe
- ClassName: 'MozillaWindowClass' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Chrome_WidgetWin_1' WindowName: ''
- ClassName: 'BattleEyeServiceWindow' WindowName: ''
- ClassName: '' WindowName: 'BattlEye Launcher'
- ClassName: 'Qt5QWindowOwnDCIcon' WindowName: ''