Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Web1234' = '%ALLUSERSPROFILE%\Application Data\download.exe'
- '%ALLUSERSPROFILE%\Application Data\download.exe'
- %ALLUSERSPROFILE%\Application Data\SQLite.Interop.dll
- %ALLUSERSPROFILE%\Application Data\System.Data.SQLite.dll
- %ALLUSERSPROFILE%\Application Data\download.exe
- %ALLUSERSPROFILE%\Application Data\msvcr100.dll
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite.temp
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite.temp-journal
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.sqlite.temp-shm
- ClassName: '(null)' WindowName: '%ALLUSERSPROFILE%\Application Data\download.exe'
- ClassName: 'Indicator' WindowName: '(null)'