Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '93885538' = '%ALLUSERSPROFILE%\Application Data\93885538\93885538.exe'
- %ALLUSERSPROFILE%\Application Data\93885538\93885538.exe Data\93885538\93885538.exe /i
- <SYSTEM32>\cmd.exe /c ""%ALLUSERSPROFILE%\Application Data\93885538\93885538.bat" "
- %ALLUSERSPROFILE%\Application Data\93885538\93885538.bat
- %ALLUSERSPROFILE%\Application Data\93885538\93885538.exe
- '94.##2.50.158':80
- 94.##2.50.158/in.php?af#########################################
- ClassName: 'Shell_TrayWnd' WindowName: ''