Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ACERPCUP' = '%APPDATA%\acerwualct.exe'
- %APPDATA%\acerwualct.exe
- %TEMP%\1.tmp
- %APPDATA%\acerwualct.exe
- %TEMP%\1.tmp
- 'uf##.#arllab.com':443
- 'uf##.#arllab.com':80
- uf##.#arllab.com/0000/a153890.asp
- DNS ASK uf##.#arllab.com
- ClassName: 'Indicator' WindowName: ''