Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{7BA1ABD2-DC03-0C34-3C65-6C969CC7CCF8}] 'stubpath' = '<SYSTEM32>\vmwarein.exe'
- '<SYSTEM32>\vmwarein.exe'
- <SYSTEM32>\vmwarein.exe
- %TEMP%\h760511.tmp
- %TEMP%\Adv.dll
- %TEMP%\Adv.dll
- 'vm##.#ronnxy.com':443
- DNS ASK vm##.#ronnxy.com