Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'frm_subrector' = 'wscript "%HOMEPATH%\frm_MENTALUNDERSGENDES\frm_BRUMS.vbs"'
- %WINDIR%\win.ini
- frm_brums.exe
- host.exe
- %HOMEPATH%\frm_mentalundersgendes\frm_brums.exe
- %HOMEPATH%\frm_mentalundersgendes\frm_brums.vbs
- %APPDATA%\install\host.exe
- %APPDATA%\install\host.exe
- '%HOMEPATH%\frm_mentalundersgendes\frm_brums.exe'
- '%APPDATA%\install\host.exe'