Техническая информация
- [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csrss.exe] 'Debugger' = '%TEMP%\3.27735070604831.exe'
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csrss.exe] 'Debugger' = '%TEMP%\3.27735070604831.exe'
- [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\smss.exe] 'Debugger' = '%TEMP%\3.27735070604831.exe'
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\smss.exe] 'Debugger' = '%TEMP%\3.27735070604831.exe'
- %TEMP%\autabf7.tmp
- %TEMP%\3.27735070604831.exe
- %TEMP%\autabf7.tmp
- из <Полный путь к файлу> в %TEMP%\4.61480422411114.exe