Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Smart Security' = '%HOMEPATH%\Start Menu\Programs\Startup\Microsoft Security.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft Security.exe
- %TEMP%\nsr2.tmp
- %TEMP%\nsh3.tmp\System.dll
- %APPDATA%\1337\csrss.exe
- %APPDATA%\1337\setup.ico
- %TEMP%\nsa5.tmp
- %TEMP%\nsf6.tmp\System.dll
- %APPDATA%\1337\svchost.exe
- %APPDATA%\1337\WinSecure.exe
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft Security.exe
- %TEMP%\nsh3.tmp\System.dll
- %TEMP%\nsf6.tmp\System.dll
- ClassName: 'AutoHotkey' WindowName: '%APPDATA%\1337\svchost.exe'
- ClassName: 'AutoHotkey' WindowName: '%HOMEPATH%\Start Menu\Programs\Startup\Microsoft Security.exe'
- '%APPDATA%\1337\csrss.exe'
- '%APPDATA%\1337\svchost.exe'
- '%HOMEPATH%\Start Menu\Programs\Startup\Microsoft Security.exe'