Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Plug Manager' = '<LS_APPDATA>\manager.exe'
- скрытых файлов
- <SYSTEM32>\rundll32.exe setupapi,InstallHinfSection DefaultInstall 128 <LS_APPDATA>\driver.inf
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnOnPostRedirect' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnonBadCertRecving' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnonZoneCrossing' = '00000000'
- <LS_APPDATA>\driver.inf
- <LS_APPDATA>\Plug.bat
- <LS_APPDATA>\manager.exe
- <LS_APPDATA>\Plug.bat
- <LS_APPDATA>\manager.exe
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''