Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%LOCALAPPDATA%\Crack-idm.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fc60d9daf1a4564a60c57f278c6a62a4' = '"%TEMP%\Chrome_Update.exe" ..'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] 'fc60d9daf1a4564a60c57f278c6a62a4' = '"%TEMP%\Chrome_Update.exe" ..'
- %APPDATA%\microsoft\windows\start menu\programs\startup\fc60d9daf1a4564a60c57f278c6a62a4.exe
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Chrome_Update.exe" "Chrome_Update.exe" ENABLE
- %LOCALAPPDATA%\crack-idm.exe
- %TEMP%\chrome_update.exe
- DNS ASK ku######hacker.no-ip.org
- '%TEMP%\chrome_update.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Chrome_Update.exe" "Chrome_Update.exe" ENABLE' (со скрытым окном)