Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'eembFJjnGvQ' = '%ALLUSERSPROFILE%\PrDWa2QnA\DlSlULBe03lf9.exe'
- %ALLUSERSPROFILE%\PrDWa2QnA\DlSlULBe03lf9.exe
- %ALLUSERSPROFILE%\PrDWa2QnA\RCX1.tmp
- %ALLUSERSPROFILE%\PrDWa2QnA\DlSlULBe03lf9.exe
- %ALLUSERSPROFILE%\PrDWa2QnA\DlSlULBe03lf9.exe
- ClassName: 'Indicator' WindowName: ''