Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '5684587467567467456745767457' = '%PROGRAMDATA%\Donald Trump Installation Directory\DonaldTrump64.Exe'
- %WINDIR%\explorer.exe
- %PROGRAMDATA%\donald trump installation directory\donaldtrump64.exe
- %TEMP%\{0e61eac3-af63-4c4d-9945-e61f7bfd3d7d}
- %TEMP%\{0e61eac3-af63-4c4d-9945-e61f7bfd3d7d}
- '19#.#50.242.255':5555
- '<SYSTEM32>\svchost.exe'
- '%WINDIR%\explorer.exe'