Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'DisallowRun' = '00000001'
- %TEMP%\{5e7d2fec-da12-4ef4-8dfc-15ac4bab2107}\expiorer.exe
- %TEMP%\aut4ff0.tmp
- %TEMP%\hzheeqh
- %TEMP%\{5e7d2fec-da12-4ef4-8dfc-15ac4bab2107}\expiorer.exe
- %TEMP%\aut4ff0.tmp
- %TEMP%\hzheeqh
- %TEMP%\{5e7d2fec-da12-4ef4-8dfc-15ac4bab2107}\expiorer.exe
- 'su####illatool.com':80
- DNS ASK su####illatool.com
- '%TEMP%\{5e7d2fec-da12-4ef4-8dfc-15ac4bab2107}\expiorer.exe' /ErrorStdOut setup="<Полный путь к файлу>"