Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f_5' = 'rundll32.exe "<LS_APPDATA>\ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f_5.avi", start'
- <SYSTEM32>\rundll32.exe ""%TEMP%\wrk2.tmp"", start first worker
- opera.exe
- iexplore.exe
- firefox.exe
- <LS_APPDATA>\ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f_5.avi
- %TEMP%\wrk2.tmp
- %TEMP%\ins1.tmp
- %TEMP%\wrk2.tmp
- %TEMP%\ins1.tmp
- '91.#88.60.4':80
- 91.#88.60.4/log.php?v=#########################################################
- ClassName: 'Indicator' WindowName: ''