Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'QkI8G6Hb1vv' = '%ALLUSERSPROFILE%\r3ZxAgmolTgE\av6g0my7pJ677M.exe'
- %ALLUSERSPROFILE%\r3ZxAgmolTgE\av6g0my7pJ677M.exe
- %TEMP%\w22X0KN9VdGAeTo.exe
- %ALLUSERSPROFILE%\r3ZxAgmolTgE\RCX1.tmp
- %ALLUSERSPROFILE%\r3ZxAgmolTgE\av6g0my7pJ677M.exe
- %ALLUSERSPROFILE%\r3ZxAgmolTgE\av6g0my7pJ677M.exe
- ClassName: 'Indicator' WindowName: ''