Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Webs-Plugins' = ''
- %TEMP%\clrss.exe
- <SYSTEM32>\wscript.exe "%TEMP%\Temp21.vbs"
- %TEMP%\clrss.exe
- %TEMP%\Temp21.vbs
- %APPDATA%\Webs-Plugins.zgy
- %TEMP%\Temp21.vbs
- ClassName: 'Indicator' WindowName: ''