Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '9b9e6481-561f-480d-8d3c-122cb6ce6d8b' = '%APPDATA%\lkebm\lkebm.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9b9e6481-561f-480d-8d3c-122cb6ce6d8b' = '%APPDATA%\lkebm\lkebm.exe'
- %APPDATA%\lkebm\lkebm.exe
- %APPDATA%\lkebm\lkebm.exe
- %APPDATA%\lkebm\lkebm.exe
- '20#.#34.130.114':80
- 20#.#34.130.114/rss.php
- ClassName: 'Indicator' WindowName: ''