Техническая информация
- %ALLUSERSPROFILE%\152119601237922022915161
- %ALLUSERSPROFILE%\69dfa185b0\bween.exe
- '51.##.126.34':80
- '%ALLUSERSPROFILE%\69dfa185b0\bween.exe'
- '%ALLUSERSPROFILE%\69dfa185b0\bween.exe' ' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /C REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d %ALLUSERSPROFILE%\69dfa185b0\' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /C REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d %ALLUSERSPROFILE%\69dfa185b0\
- '%WINDIR%\syswow64\reg.exe' ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /f /v Startup /t REG_SZ /d %ALLUSERSPROFILE%\69dfa185b0\