quando Troj / Agent-LMV è il file installaties Crea
il trojan aggiunge seguenti le Voci di di registry system:
HKLM \\ SOFTWARE \\ Microsoft \\ Windows NT \\ CurrentVersion \\ Terminal Server \\ Install
\\ Software \\ Microsoft \\ Windows \\ CurrentVersion \\ Run
Sistema de comm
conmsyrtl.exe
HKLM \\ SOFTWARE \\ Microsoft \\ Windows \\ CurrentVersion \\ Run
Sistema de comm
conmsyrtl.exe
HKLM \\ SYSTEM \\ ControlSet001 \\ Services \\ SharedAccess \\ Parameters \\
\\ FirewallPolicy StandardProfile \\ AuthorizedApplications \\ List \\ C:
\u0026lt;path to Trojan>
\u0026lt;path to trojan>: * : Enabled: Sistema de Comm
0 comments:
Post a Comment