Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Spark' = '%APPDATA%\Spark\secbw.exe -notray'
- '%APPDATA%\Spark\secbw.exe'
- '%APPDATA%\Spark\secbw.exe' -notray
- '<SYSTEM32>\reg.exe' ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Spark /t REG_SZ /d "%APPDATA%\Spark\secbw.exe -notray" /f
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\ESORUTVH.bat" "
- '<SYSTEM32>\ipconfig.exe'
- <SYSTEM32>\ipconfig.exe
- opera.exe
- safari.exe
- firefox.exe
- chrome.exe
- %TEMP%\ESORUTVH.bat
- %APPDATA%\Spark\secbw.exe
- %TEMP%\~DFCB9B.tmp
- %TEMP%\~DFA638.tmp
- ClassName: 'Indicator' WindowName: '(null)'