Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Je12294S14645' = '%HOMEPATH%\Cl83378S74132\filre.exe'
- %TEMP%\aut1.tmp
- %HOMEPATH%\Fz1521A72246.FW8
- C:\<Имя вируса>.exe
- %HOMEPATH%\Mw26638M49661.txt
- %HOMEPATH%\Fz1521A72246.FW8
- %HOMEPATH%\Mw26638M49661.txt
- %TEMP%\aut1.tmp
- ClassName: 'Indicator' WindowName: '(null)'