Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mola' = '%HOMEPATH%\Install\EXCEL.vbs -rb'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'Wintas' = '%HOMEPATH%\Install\EXCEL.exe'
- excel.exe
- %TEMP%\bmw_renault.xls
- %HOMEPATH%\install\excel.exe
- %HOMEPATH%\install\excel.vbs
- %HOMEPATH%\install\excel.exe
- '21#.#07.152.253':3471
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Install\EXCEL.vbs"
- '%HOMEPATH%\install\excel.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\Install\EXCEL.vbs"' (со скрытым окном)
- '%HOMEPATH%\install\excel.exe' ' (со скрытым окном)
- '%ProgramFiles%\microsoft office\office12\excel.exe' /e