Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Mdm' = '<SYSTEM32>\MdM.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SysTemperatureNotRemove' = '<SYSTEM32>\cmmpu.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'PhotoPaint' = '<SYSTEM32>\Abril Lavigne Nude.jpeg .exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'CountrySelection' = '<SYSTEM32>\pctptt.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Ctfmon' = '<SYSTEM32>\ctfmon.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Temperatura' = '<SYSTEM32>\ptsnoop.exe'
- <SYSTEM32>\cmmpu.exe
- <SYSTEM32>\Abril Lavigne Nude.jpeg .exe
- <SYSTEM32>\MdM.exe
- <SYSTEM32>\pctptt.exe
- <SYSTEM32>\ptsnoop.exe
- <SYSTEM32>\MdM.exe
- <SYSTEM32>\cmmpu.exe
- <SYSTEM32>\pctptt.exe
- <SYSTEM32>\ptsnoop.exe