Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WhYNI50tKGF' = '%ALLUSERSPROFILE%\qi4svB1fGtw\QzcUhLdXTGjfrCDf.exe'
- %ALLUSERSPROFILE%\qi4svB1fGtw\QzcUhLdXTGjfrCDf.exe
- %TEMP%\Gtw7W9i4n0o.exe
- %ALLUSERSPROFILE%\qi4svB1fGtw\RCX1.tmp
- %ALLUSERSPROFILE%\qi4svB1fGtw\QzcUhLdXTGjfrCDf.exe
- %TEMP%\Gtw7W9i4n0o.exe
- %ALLUSERSPROFILE%\qi4svB1fGtw\QzcUhLdXTGjfrCDf.exe
- ClassName: 'Indicator' WindowName: ''