Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Run Time2' = 'c:\users\public\windows\dl.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Run Time' = 'c:\users\public\windows\m.e.exe'
- '<SYSTEM32>\reg.exe' ADD "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "Run Time2" /t REG_SZ /d "c:\users\public\windows\dl.exe" /f
- '<SYSTEM32>\attrib.exe' +h +r +s c:\Users\public\windows
- '<SYSTEM32>\taskkill.exe' /f /im file.sys
- '<SYSTEM32>\taskkill.exe' /f /im dl.exe
- '%WINDIR%\explorer.exe' C:\users\public\windows\dl.exe
- '<SYSTEM32>\reg.exe' ADD "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v "Run Time" /t REG_SZ /d "c:\users\public\windows\m.e.exe" /f
- 'sm##.gmail.com':465
- DNS ASK sm##.gmail.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: '' WindowName: ''