Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'gPh21Q' = '%HOMEPATH%\xVg65E\figWj.exe'
- '%HOMEPATH%\xVg65E\figWj.exe'
- %TEMP%\cHc64R.XZ5
- %HOMEPATH%\sBi96Y.txt
- %TEMP%\aut1.tmp
- %HOMEPATH%\xVg65E\figWj.exe
- %HOMEPATH%\xVg65E\gTc.xoc
- %HOMEPATH%\sBi96Y.txt
- %TEMP%\cHc64R.XZ5
- %TEMP%\aut1.tmp
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'