Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XRBa0DNo' = '%ALLUSERSPROFILE%\d6nY6ZsCMk\1DnWLckUMdsV6ns9.exe'
- %ALLUSERSPROFILE%\d6nY6ZsCMk\1DnWLckUMdsV6ns9.exe
- %TEMP%\dT3k0EfwmV75E.exe
- %ALLUSERSPROFILE%\d6nY6ZsCMk\RCX1.tmp
- %ALLUSERSPROFILE%\d6nY6ZsCMk\1DnWLckUMdsV6ns9.exe
- %ALLUSERSPROFILE%\d6nY6ZsCMk\1DnWLckUMdsV6ns9.exe
- ClassName: 'Indicator' WindowName: ''