Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Csrss.exe' = '%APPDATA%\Dir\Csrss.exe.exe'
- '%APPDATA%\Dir\Csrss.exe.exe'
- '%TEMP%\380.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %APPDATA%\Dir\Csrss.exe.exe
- %APPDATA%\Dir\Dated.dat
- %TEMP%\380.exe
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\~DF5C59.tmp
- 're####e23.no-ip.org':2185
- DNS ASK re####e23.no-ip.org
- ClassName: 'Indicator' WindowName: ''