Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XpertRAT' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'XpertRAT' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{I5B6W7Y6-F4Q6-Q2S2-W0X0-H8U2R3L6X771}] 'StubPath' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RUNSERVICES] 'Server' = '%WINDIR%\XpertRAT\Server.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\XpertRAT\Server.exe' = '%WINDIR%\XpertRAT\Server.exe:*:Enabled:Server'
- Средство контроля пользовательских учетных записей (UAC)
- %WINDIR%\XpertRAT\Server.exe
- %WINDIR%\XpertRAT\Server.exe
- %WINDIR%\XpertRAT\Server.exe
- ClassName: 'Indicator' WindowName: ''