Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IDOsysearm' = '%PROGRAM_FILES%\Intel\earm\Storm.exe'
- %PROGRAM_FILES%\Intel\earm\Storm.exe
- C:\perfect.exe C:\perfect.dll
- C:\perfect.exe
- C:\perfect.upx
- %PROGRAM_FILES%\Intel\earm\Storm.exe
- C:\perfect.dll
- C:\perfect.dll
- C:\perfect.exe
- C:\perfect.upx в C:\perfect.dll