Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6rV05T84U2' = '%HOMEPATH%\6rV05T84U2.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\6rV05T84U2.exe
- %TEMP%\aut1.tmp
- %TEMP%\6rV05T84U2
- %HOMEPATH%\6rV05T84U2.exe
- %TEMP%\aut1.tmp
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'