Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%APPDATA%\\xvi.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'xvi' = '%APPDATA%\xvi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%HOMEPATH%\Local Settings\Tempxvi.exe' = '%HOMEPATH%\Local Settings\Tempxvi.exe:*:Enabled:xvi'
- '%APPDATA%\xvi.exe'
- '%TEMP%\xvi.exe'
- '%TEMP%\VirtualDJ_Setup_v6.0.6_7.exe'
- %TEMP%\xvi.exe
- %TEMP%\VirtualDJ_Setup_v6.0.6_7.exe
- %TEMP%\nsf2.tmp
- %APPDATA%\xvi.exe
- %TEMP%\xvi.exe в %APPDATA%\xvi.exe
- '78.##.223.84':50555
- ClassName: 'Indicator' WindowName: '(null)'