Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adobe Acrobat' = ''
- C:\drivers\office\ruin\runtime.exe
- <SYSTEM32>\cmd.exe /c C:\drivers\office\ruin\start.bat
- <SYSTEM32>\wscript.exe "C:\drivers\office\ruin\run.vbs"
- C:\drivers\office\ruin\iexplorer.exe
- C:\drivers\office\ruin\project1.dll
- C:\drivers\office\ruin\run.bat
- C:\drivers\office\ruin\csk.dev
- C:\drivers\office\ruin\run.vbs
- C:\drivers\office\ruin\runtime.exe
- C:\drivers\office\ruin\start.bat
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''