Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Media Player' = '%APPDATA%\Microsoft\Media Player\rdppclip.exe'
- '%APPDATA%\Microsoft\Media Player\rdppclip.exe'
- '<SYSTEM32>\reg.exe' add HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Media Player" /t REG_SZ /f /d "%APPDATA%\Microsoft\Media Player\rdppclip.exe"
- %WINDIR%\Explorer.EXE
- %TEMP%\CMF1.tmp
- %TEMP%\__00ACF3377FAC98672AA3876.TMP
- %APPDATA%\Microsoft\Media Player\rdppclip.exe
- 'c0####.5gbfree.com':80
- c0####.5gbfree.com/sub/ads.php?1=####################################
- DNS ASK c0####.5gbfree.com
- ClassName: 'Indicator' WindowName: ''