Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsApplication2' = '<Полный путь к вирусу>'
- chrome.exe
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphefpgpagncdcelkfnfcblgkfnpfkej\3.1_0\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphefpgpagncdcelkfnfcblgkfnpfkej\3.1_0\script.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphefpgpagncdcelkfnfcblgkfnpfkej\3.1_0\background.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphefpgpagncdcelkfnfcblgkfnpfkej\3.1_0\icon.png
- ClassName: 'Indicator' WindowName: '(null)'