Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'reader_s' = '%HOMEPATH%\reader_s.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'reader_s' = '<SYSTEM32>\reader_s.exe'
- <SYSTEM32>\reader_s.exe /n
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\reader_s.exe
- <SYSTEM32>\reader_s.exe
- '22#.#2.89.137':80
- ClassName: 'Indicator' WindowName: ''