Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'sx32tp12o3' = '%HOMEPATH%\sx32tp12o3\42327.vbs'
- '%WINDIR%\Updater.exe'
- '%HOMEPATH%\sx32tp12o3\Update.com' huUdxsVxAYRC
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\sx32tp12o3\94199.cmd
- %HOMEPATH%\sx32tp12o3\42327.vbs
- %WINDIR%\Updater.exe
- %HOMEPATH%\sx32tp12o3\HkOIE.LIX
- %HOMEPATH%\sx32tp12o3\IewVKsnqUwh.LXN
- %HOMEPATH%\sx32tp12o3\Update.com
- %HOMEPATH%\sx32tp12o3\huUdxsVxAYRC
- %HOMEPATH%\sx32tp12o3\HkOIE.LIX
- %HOMEPATH%\sx32tp12o3\42327.vbs
- %HOMEPATH%\sx32tp12o3\94199.cmd
- %HOMEPATH%\sx32tp12o3\IewVKsnqUwh.LXN
- %HOMEPATH%\sx32tp12o3\Update.com
- %HOMEPATH%\sx32tp12o3\huUdxsVxAYRC
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'