Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'AtlasFilesMap1' = '%ALLUSERSPROFILE%\AtlasFilesMap1\rekeywiz.exe'
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "UpdateService" /sc once /tr "%ALLUSERSPROFILE%\AtlasFilesMap1\rekeywiz.exe" /st 22:37
- %TEMP%\1.a
- %ALLUSERSPROFILE%\atlasfilesmap1\rekeywiz.exe
- %ALLUSERSPROFILE%\atlasfilesmap1\duser.dll
- %ALLUSERSPROFILE%\atlasfilesmap1\j4sjiqq.tmp
- %ALLUSERSPROFILE%\atlasfilesmap1\rekeywiz.exe.config
- %TEMP%\1.a
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding