Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4b84252df4a20e792ad80a8f1ee58135' = '"%TEMP%\Skype TM.cmd" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4b84252df4a20e792ad80a8f1ee58135' = '"%TEMP%\Skype TM.cmd" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\4b84252df4a20e792ad80a8f1ee58135.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\Skype TM.cmd' = '%TEMP%\Skype TM.cmd:*:Enabled:Skype TM.cmd'
- '%TEMP%\Skype TM.cmd'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Skype TM.cmd" "Skype TM.cmd" ENABLE
- %TEMP%\Skype TM.cmd
- 'x0.#zo.cc':1177
- DNS ASK x0.#zo.cc
- ClassName: 'Indicator' WindowName: ''