Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3caeb26764675258d8d8c075e5b9b6a9' = '"C:\taskmgr.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3caeb26764675258d8d8c075e5b9b6a9' = '"C:\taskmgr.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\3caeb26764675258d8d8c075e5b9b6a9.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] 'C:\taskmgr.exe' = 'C:\taskmgr.exe:*:Enabled:taskmgr.exe'
- 'C:\taskmgr.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "C:\taskmgr.exe" "taskmgr.exe" ENABLE
- C:\taskmgr.exe
- 'localhost':80
- ClassName: 'Indicator' WindowName: '(null)'