Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'winstart' = '%APPDATA%\taskhost.exe'
- %PROGRAMDATA%\software 20-06-2020\software 20-06-2020\19.22.22.9\temp\crack_cim.exe
- %PROGRAMDATA%\software 20-06-2020\software 20-06-2020\19.22.22.9\temp\key_cim.exe
- %APPDATA%\taskhost.exe
- %PROGRAMDATA%\software 20-06-2020\software 20-06-2020\19.22.22.9\temp\crack_cim.exe
- %PROGRAMDATA%\software 20-06-2020\software 20-06-2020\19.22.22.9\temp\key_cim.exe
- '%PROGRAMDATA%\software 20-06-2020\software 20-06-2020\19.22.22.9\temp\crack_cim.exe'
- '%PROGRAMDATA%\software 20-06-2020\software 20-06-2020\19.22.22.9\temp\key_cim.exe'