Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '6f7om2qco47' = '%HOMEPATH%\6f7om2qco47\56833.vbs'
- '%HOMEPATH%\6f7om2qco47\bQyWBEoueu.com' Sdcp.TRZ
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\6f7om2qco47\56833.vbs
- %HOMEPATH%\6f7om2qco47\38079.cmd
- %APPDATA%\Roaming\Imminent\Logs\22-05-2014
- %HOMEPATH%\6f7om2qco47\run.vbs
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\start.lnk
- %HOMEPATH%\6f7om2qco47\bQyWBEoueu.com
- %HOMEPATH%\6f7om2qco47\kYDFZMTmsJ.HJH
- %HOMEPATH%\6f7om2qco47\olcNkHj.YMT
- %HOMEPATH%\6f7om2qco47\Sdcp.TRZ
- %HOMEPATH%\6f7om2qco47\olcNkHj.YMT
- %HOMEPATH%\6f7om2qco47\56833.vbs
- %HOMEPATH%\6f7om2qco47\38079.cmd
- %HOMEPATH%\6f7om2qco47\kYDFZMTmsJ.HJH
- %HOMEPATH%\6f7om2qco47\bQyWBEoueu.com
- %HOMEPATH%\6f7om2qco47\Sdcp.TRZ
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\start.lnk
- '71.##7.127.4':9003
- DNS ASK dn#.##ftncsi.com
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'