Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'log.exed' = '%HOMEPATH%\Favorites\log.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'log.exee' = '%HOMEPATH%\Start Menu\log.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'log.exec' = '%HOMEPATH%\My Documents\log.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'log.exea' = '%HOMEPATH%\Desktop\log.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'log.exeb' = '%HOMEPATH%\Start Menu\Programs\log.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\log.exe
- %HOMEPATH%\Favorites\log.exe
- %HOMEPATH%\Start Menu\log.exe
- %HOMEPATH%\My Documents\log.exe
- %HOMEPATH%\Desktop\log.exe
- %HOMEPATH%\Start Menu\Programs\log.exe
- %HOMEPATH%\My Documents\log.exe
- %HOMEPATH%\Favorites\log.exe
- %HOMEPATH%\Start Menu\log.exe
- <Полный путь к вирусу>
- %HOMEPATH%\Desktop\log.exe
- %HOMEPATH%\Start Menu\Programs\log.exe
- 'kh####4.sytes.net':80
- DNS ASK kh####4.sytes.net
- ClassName: 'Indicator' WindowName: ''