Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wind' = '%WINDIR%\wind.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'execu' = '<SYSTEM32>\execu.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ereeg' = '<SYSTEM32>\ereeg.exe'
- %WINDIR%\wind.exe
- <SYSTEM32>\sys.bat
- <SYSTEM32>\ereeg.exe
- <SYSTEM32>\execu.exe
- ClassName: 'ConsoleWindowClass' WindowName: ''