Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'AppDomain' = '"%APPDATA%\AppDomain.exe"'
- '%APPDATA%\AppDomain.exe'
- %APPDATA%\AppDomain.exe
- %TEMP%\nse4.tmp\contraceptions.dll
- %TEMP%\domain\wdacl.exe
- %APPDATA%\WINBIN.PAK
- %TEMP%\nsa2.tmp\contraceptions.dll
- %TEMP%\nse4.tmp\contraceptions.dll
- %TEMP%\nsa2.tmp\contraceptions.dll