Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{9X6IC-2FX2B-A68XJ-QB7M2-7HVC0}] 'StubPath' = 'C:\RBUpdate.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'caihong' = 'C:\RBUpdate.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'caihong' = 'C:\RBUpdate.exe'
- C:\RBUpdate.exe
- C:\RBUpdate.exe
- 'localhost':4291
- ClassName: 'Indicator' WindowName: ''