Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Window' = 'C:\SysWoW64\Infinity.exe'
- <Имя диска съемного носителя>:\Microsoft Infinty.exe
- '<SYSTEM32>\cmd.exe' /c attrib +s +h C:\SysWoW64\Infinity.exe
- '<SYSTEM32>\attrib.exe' +s +h C:\SysWoW64\Infinity.exe
- '<SYSTEM32>\attrib.exe' +s +h C:\SysWoW64
- '<SYSTEM32>\cmd.exe' /c title :.Winlogin.:
- '<SYSTEM32>\cmd.exe' /c attrib +s +h C:\SysWoW64
- C:\SysWoW64\Infinity.exe
- <Полный путь к вирусу>
- C:\SysWoW64\Infinity.exe
- ClassName: '' WindowName: 'WinZip'
- ClassName: '' WindowName: 'Calculator'
- ClassName: '' WindowName: 'Google Chrome'
- ClassName: '' WindowName: 'WinRar'
- ClassName: '' WindowName: 'Book1 - Microsoft Excel'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Delete File'
- ClassName: '' WindowName: 'Control Panel'
- ClassName: '' WindowName: 'Adobe Reader'
- ClassName: '' WindowName: 'Command Prompt'
- ClassName: 'ConsoleWindowClass' WindowName: ''
- ClassName: '' WindowName: 'Windows Task Manager'
- ClassName: '' WindowName: 'VLC media Player'
- ClassName: '' WindowName: 'Mozilla Firefox'
- ClassName: '' WindowName: 'Registry Editor'
- ClassName: '' WindowName: 'Untitled - Notepad'