Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '%HOMEPATH%\tgw8r669' = '%HOMEPATH%\tgw8r669\wzjnfcark.vbs'
- %HOMEPATH%\Start Menu\Programs\Startup\start.lnk
- '%HOMEPATH%\tgw8r669\zmcju.exe' ocdohnzwv
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\tgw8r669\oehqmu.cmd
- %HOMEPATH%\tgw8r669\wzjnfcark.vbs
- %HOMEPATH%\tgw8r669\run.vbs
- %HOMEPATH%\tgw8r669\ibaomn.TBU
- %HOMEPATH%\tgw8r669\wqsbai.JWR
- %HOMEPATH%\tgw8r669\zmcju.exe
- %HOMEPATH%\tgw8r669\ocdohnzwv
- %HOMEPATH%\Start Menu\Programs\Startup\start.lnk
- %HOMEPATH%\tgw8r669\oehqmu.cmd
- %HOMEPATH%\tgw8r669\wzjnfcark.vbs
- 'dc.##cktalk.org':1627
- DNS ASK dc.##cktalk.org
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''