Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hdsafe' = '"\LPFsafe.exe"'
- <SYSTEM32>\spoolsv.exe
- ClassName: '' WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- '<IP-адрес в локальной сети>':80
- '<IP-адрес в локальной сети>':139
- '<IP-адрес в локальной сети>':445
- ClassName: '' WindowName: '???????? V2.8'
- ClassName: '' WindowName: 'VMware Workstation'
- ClassName: '' WindowName: '??????????'
- ClassName: '' WindowName: '???????? V2.7'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: '?????????????????? (??????????????V1.0.1.920) http://www.94xyz.com'
- ClassName: '' WindowName: ' Windows ?????????? '
- ClassName: '' WindowName: 'Process Explorer - Sysinternals: www.sysinternals.com'
- ClassName: '' WindowName: 'EXEEM'
- ClassName: '' WindowName: 'EZPEER'
- ClassName: '' WindowName: '????????'
- ClassName: '' WindowName: 'etc'
- ClassName: '' WindowName: 'WinHex'
- ClassName: '' WindowName: 'OllyDbg'
- ClassName: '' WindowName: '????PUBWIN??????????'