Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Shit.exe' = '%APPDATA%\Shit.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '57a6d785a.exe' = '%TEMP%\57a6d785a.exe'
- shit.exe
- %APPDATA%\shit.exe
- %TEMP%\57a6d785a.exe
- '%APPDATA%\shit.exe'
- '%TEMP%\57a6d785a.exe'