Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{613BAQ6J-57EI-4461-82LS-0L276K5IE4SY}] 'StubPath' = 'c:\directory\CyberGate\install\server.exe Restart'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'rundll32' = '%TEMP%\rundll32 .exe'
- %TEMP%\%tmp%.exe
- %TEMP%\%temp%.exe
- %TEMP%\%tmp%.exe
- C:\directory\CyberGate\install\server.exe
- %TEMP%\%USERNAME%2.txt
- %TEMP%\rundll32 .exe
- %TEMP%\winamp\svhost.exe
- %TEMP%\%temp%.exe
- %TEMP%\winamp\svhost.exe
- %TEMP%\rundll32 .exe
- C:\directory\CyberGate\install\server.exe