Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ec525f4' = '%APPDATA%\ec525f4.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ec525f' = 'C:\ec525f4\ec525f4.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\ec525f4.exe
- '%WINDIR%\FrameworkUpdate\Update.exe'
- '%TEMP%\3.tmp'
- '%TEMP%\2.tmp'
- '%WINDIR%\explorer.exe'
- %WINDIR%\explorer.exe
- %APPDATA%\ec525f4.exe
- %APPDATA%\麽鎒駓覜
- %WINDIR%\FrameworkUpdate\Update.exe
- %TEMP%\2.tmp
- %TEMP%\3.tmp
- C:\ec525f4\ec525f4.exe
- %APPDATA%\麽鎒駓覜
- ClassName: 'Indicator' WindowName: ''