Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'A' = '%TEMP%\upnpcont.exe A'
- '%TEMP%\upnpcont.exe' A
- '<SYSTEM32>\reg.exe' add "HKCU\SOFTWARE\MICROSOFT\Windows\CurrentVersion\Run" /v A /d "%TEMP%\upnpcont.exe A" /f
- '<SYSTEM32>\ping.exe' -10 localhost
- '<SYSTEM32>\cmd.exe' /c %TEMP%\procedure.cmd
- Idle
- %TEMP%\procedure.cmd
- %TEMP%\upnpcont.exe
- %TEMP%\upnpcont.exe в %TEMP%\upnpcont.exe
- ClassName: 'Indicator' WindowName: ''