Adware.Snoozer

by ezclean posted Apr 23, 2021
?

단축키

Prev이전 문서

Next다음 문서

ESC닫기

크게 작게 위로 아래로 댓글로 가기 인쇄

Adware.Snoozer
 

*file
C:\Users\{USERNAME}\AppData\Roaming\Sixth\Sixth.exe
C:\Windows\System32\Tasks\Intermediate
C:\Users\{USERNAME}\AppData\Roaming\GeniusCache\5aba2012eaa9989148d4696c0d5d07a158ecb0be.exe
C:\Users\{USERNAME}\AppData\Roaming\Genius\Genius.exe

C:\Windows\System32\Tasks\Sixth

 

 

*reg_key
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B81184F-730D-4ACD-B283-14659F34573F}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Intermediate
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CFB1D2F0-DF3B-4051-B363-4651AEC903BC}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Sixth

 

11111.jpg