Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '%TEMP%\ieagent.dll'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'IEagent' = '%APPDATA%\Microsoft\Internet Explorer\ieagent.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\Microsoft\Internet Explorer\ieassistant.exe' = '%APPDATA%\Microsoft\Internet Explorer\ieassistant.exe:*:Enabled:IE Agent'
- %TEMP%\ieagent.dll
- ClassName: 'Indicator' WindowName: '(null)'