Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f_46' = 'rundll32.exe "%APPDATA%\ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f_46.avi", start'
- <SYSTEM32>\rundll32.exe ""%TEMP%\\5f6c271c-fa15-4ffa-882b-0ce64accba40\wrk2.tmp_46"", start task worker
- <SYSTEM32>\rundll32.exe ""%TEMP%\\5f6c271c-fa15-4ffa-882b-0ce64accba40\wrk1.tmp_46"", start first worker
- %TEMP%\5f6c271c-fa15-4ffa-882b-0ce64accba40\wrk2.tmp_46
- %APPDATA%\ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f_46.avi
- %TEMP%\5f6c271c-fa15-4ffa-882b-0ce64accba40\wrk1.tmp_46
- %TEMP%\5f6c271c-fa15-4ffa-882b-0ce64accba40\wrk1.tmp_46
- '91.#88.60.5':80
- 91.#88.60.5/t.php?ap#####################################################################
- 91.#88.60.5/hit.php?v=#########################################################################
- ClassName: 'Indicator' WindowName: ''