Техническая информация
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '{6B4881DB-A797-5478-3B3FAC7EE5DFB7A0}' = '%ALLUSERSPROFILE%\Application Data\bilinnaf.exe'
- %ALLUSERSPROFILE%\application data\bilinnaf.exe
- %ALLUSERSPROFILE%\application data\bilinnaf.exe
- '%ALLUSERSPROFILE%\application data\bilinnaf.exe'