Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'NetWire' = '%APPDATA%\Install\Host.exe'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{1QTM7013-SM70-0TYM-72V8-16W2DX1AW2C7}] 'StubPath' = '"%APPDATA%\Install\Host.exe"'
- %APPDATA%\microsoft\windows\start menu\programs\startup\mpnotify.lnk
- host.exe
- C:\onxmdcudled\mpnotify\dpiscaling.scr
- %APPDATA%\install\host.exe
- DNS ASK su#.####est1jewels.waw.pl
- '%APPDATA%\install\host.exe' -m "<Полный путь к файлу>"
- '%APPDATA%\install\host.exe'