Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Engine-Owning' = '%APPDATA%\Installation Path\Engine-Owning2.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- <SYSTEM32>\cmd.exe
- %APPDATA%\Installation Path\Engine-Owning2.exe
- %TEMP%\DHEHR.KLe
- %TEMP%\aut1.tmp
- %TEMP%\aut1.tmp
- '%APPDATA%\Installation Path\Engine-Owning2.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe'
- '<SYSTEM32>\cmd.exe' %APPDATA%\Installation Path\Engine-Owning2.exe pingia 2880 pongumais
- '<SYSTEM32>\cmd.exe' <Полный путь к файлу> pingia 2852 pongumais