Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CaReLOmnPVKrqs' = '%ALLUSERSPROFILE%\W2eoe4fjXhas\26niN2jvfHZNLgt.exe'
- %ALLUSERSPROFILE%\W2eoe4fjXhas\26niN2jvfHZNLgt.exe
- %TEMP%\T9kAfYDZ.exe
- %ALLUSERSPROFILE%\W2eoe4fjXhas\RCX1.tmp
- %ALLUSERSPROFILE%\W2eoe4fjXhas\26niN2jvfHZNLgt.exe
- %TEMP%\T9kAfYDZ.exe
- %ALLUSERSPROFILE%\W2eoe4fjXhas\26niN2jvfHZNLgt.exe
- ClassName: 'Indicator' WindowName: ''