Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wuaclt.exe' = '%WINDIR%\video_tarjeta.com'
- <SYSTEM32>\ipconfig.exe /flushdns
- <SYSTEM32>\reg.exe ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v wuaclt.exe /t REG_SZ /d "%WINDIR%\video_tarjeta.com" /f
- <SYSTEM32>\ping.exe -n 1 localhost
- <SYSTEM32>\attrib.exe %WINDIR%\video_tarjeta.com +r +h
- <SYSTEM32>\attrib.exe -r <DRIVERS>\etc\hosts
- <SYSTEM32>\attrib.exe <DRIVERS>\etc\hosts +r +h
- %WINDIR%\video_tarjeta.com
- %TEMP%\a94342.bat
- %WINDIR%\video_tarjeta.com
- %TEMP%\a94342.bat
- %TEMP%\a94342.bat