| |
File of spyware Win32.Ursnif.L, send user information to 81.95.147.107.
It will set the following registry entries: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ttool = "%Windows%\9129837.exe"
Default path: C:\WINDOWS\hide_evr2.sys
File size: 5,376 Bytes |
|