Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\The Etool ] 'Start' = '00000002'
- '%WINDIR%\Etool.exe'
- '%CommonProgramFiles%\43E4123F.exe'
- '%CommonProgramFiles%\DF2A38A5.exe'
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\Uer.bat
- %WINDIR%\Etool.exe
- %WINDIR%\Uer.bat
- %CommonProgramFiles%\43E4123F.exe
- %CommonProgramFiles%\DF2A38A5.exe
- %CommonProgramFiles%\43E4123F.exe
- 'qq#####7620.3322.org':6500
- DNS ASK qq#####7620.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'