Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MediaPlayer' = '%TEMP%\mplayerc.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'QuickLaunch' = '%TEMP%\Services.exe'
- Средство контроля пользовательских учетных записей (UAC)
- %TEMP%\mplayerc.exe
- %TEMP%\Services.exe
- <SYSTEM32>\wscript.exe "c:\sys.vbs"
- <SYSTEM32>\cmd.exe /c c:\AUTOEXEC.BAT
- %TEMP%\mplayerc.exe
- %WINDIR%\Version.exe
- C:\sys.vbs
- %TEMP%\Services.exe
- %WINDIR%\Version.exe
- %TEMP%\Services.exe
- ClassName: '' WindowName: 'Control Panel'
- ClassName: '' WindowName: 'Command Prompt'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Windows Task Manager'
- ClassName: '' WindowName: 'Run'
- ClassName: '' WindowName: 'Search Results'