Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'runAPI79' = '"%TEMP%\runAPI46.exe"'
- <LS_APPDATA>\Xenocode\Sandbox\nWCbRJqcPvoAuyI\7.6.8.9\2012.10.08T18.29\Native\STUBEXE\8.0.1112\@PROFILE@\Local Settings\Temp\win29.exe
- <LS_APPDATA>\Xenocode\Sandbox\nWCbRJqcPvoAuyI\7.6.8.9\2012.10.08T18.29\Virtual\STUBEXE\8.0.1112\@APPDIR@\0.exe
- %TEMP%\runAPI46.exe
- %TEMP%\win29.exe
- ClassName: 'Indicator' WindowName: ''