Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'eNFiBGedCC' = '"%TEMP%\tempfile.exe"'
- process32.exe
- [<HKCU>\Software\Google\Google Talk\Accounts]
- [<HKCU>\Software\Paltalk]
- %LOCALAPPDATA%\google\chrome\user data\default\web data
- %TEMP%\process32.exe
- %APPDATA%\chrtmp
- %TEMP%\tempfile.exe
- '%TEMP%\process32.exe'