Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HOsGFVZbTsHzkSUoRWjgPcCCdlyauZxPpQbVnWtdntpBShoqzX' = '%HOMEPATH%\Templates\amir.exe'
- %HOMEPATH%\My Documents\amir.exe
- %TEMP%\amir.exe
- %HOMEPATH%\Templates\amir.exe
- %HOMEPATH%\Templates\aclui.dll
- %TEMP%\winamp\svhost.exe
- %TEMP%\amir.exe
- %HOMEPATH%\My Documents\amir.exe
- %HOMEPATH%\My Documents\aclui.dll
- %HOMEPATH%\Templates\aclui.dll
- %TEMP%\winamp\svhost.exe
- %HOMEPATH%\Templates\amir.exe
- %HOMEPATH%\My Documents\amir.exe
- %HOMEPATH%\My Documents\aclui.dll
- ClassName: 'Indicator' WindowName: ''