Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows' = '<SYSTEM32>\systemdrive.exe'
- '<SYSTEM32>\systemdrive.exe'
- '<SYSTEM32>\instalator.exe'
- '%WINDIR%\regedit.exe' /s %WINDIR%\DelMe.reg
- '<SYSTEM32>\wscript.exe' "<SYSTEM32>\starter.crypted.vbs"
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\disabled_interfaces.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\disable_interface.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\enable_interface.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\4294966294.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\11001.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\11002.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\11004.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\nat.html
- <SYSTEM32>\conf\http-proxy\wwwroot\retry.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\CanalKitBlocked.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\CanalKitBlocked2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\readheaders_error2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\forbidden.html
- <SYSTEM32>\conf\http-proxy\wwwroot\index.html
- <SYSTEM32>\conf\http-proxy\wwwroot\readheaders_error.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\disable_interface.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\enable_interface.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\nat.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\disabled_interfaces.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\11002.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\11004.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\4294966294.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\nat.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10060.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10061.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10065.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10054.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10049.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10051.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\ru\10053.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\connect_error.html
- <SYSTEM32>\conf\plugins\service\activate.f
- <SYSTEM32>\conf\plugins\service\index.f
- <SYSTEM32>\conf\plugins\service\install_service.bat
- <SYSTEM32>\conf\plugins\console\index.f
- <SYSTEM32>\conf\OnStartupPlugins.rules.txt
- <SYSTEM32>\conf\OnThreadConnect.rules.txt
- <SYSTEM32>\conf\plugins\console\activate.f
- <SYSTEM32>\conf\plugins\service\uninstall_service.bat
- <SYSTEM32>\starter.crypted.vbs
- %WINDIR%\DelMe.reg
- <SYSTEM32>\acFP.log
- <SYSTEM32>\instalator.exe
- <SYSTEM32>\conf\plugins\syslog\activate.f
- <SYSTEM32>\conf\plugins\syslog\index.f
- <SYSTEM32>\acFP.pid
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\readheaders_error.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\readheaders_error2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\retry.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\index.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\connect_error2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\create_ip_list.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\forbidden.html
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\send_request_error2.html
- <SYSTEM32>\conf\OnDisconnect.rules.txt
- <SYSTEM32>\conf\OnShutdown.rules.txt
- <SYSTEM32>\conf\OnStartup.rules.txt
- <SYSTEM32>\conf\OnConnect.rules.txt
- <SYSTEM32>\conf\http-proxy\wwwroot\ru\unknown_method.html
- <SYSTEM32>\conf\http-proxy\wwwroot\unknown_method.html
- <SYSTEM32>\conf\log.str.txt
- <SYSTEM32>\conf\http-proxy\plugins\authorization\index.f
- <SYSTEM32>\conf\http-proxy\plugins\black_list\activate.f
- <SYSTEM32>\conf\http-proxy\plugins\black_list\index.f
- <SYSTEM32>\conf\http-proxy\plugins\authorization\Authorization.rules.txt
- <SYSTEM32>\conf\http-proxy\plugins\ads_block\OnRequest.rules.txt
- <SYSTEM32>\conf\http-proxy\plugins\authorization\activate.f
- <SYSTEM32>\conf\http-proxy\plugins\authorization\AuthFile.rules.txt
- <SYSTEM32>\conf\http-proxy\plugins\black_list\OnRequest.rules.txt
- <SYSTEM32>\conf\http-proxy\wwwroot\connect_error2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\console.html
- <SYSTEM32>\conf\http-proxy\wwwroot\create_ip_list.html
- <SYSTEM32>\conf\http-proxy\wwwroot\connect_error.html
- <SYSTEM32>\conf\http-proxy\plugins\cache\activate.f
- <SYSTEM32>\conf\http-proxy\plugins\cache\index.f
- <SYSTEM32>\conf\http-proxy\plugins\cache\OnRequest.rules.txt
- <SYSTEM32>\conf\http-proxy\OnConnectError.rules.txt
- <SYSTEM32>\conf\http-proxy\OnReadBodyError.rules.txt
- <SYSTEM32>\conf\http-proxy\OnReadHeadersError.rules.txt
- <SYSTEM32>\conf\http-proxy\LocalWeb.rules.txt
- <SYSTEM32>\systemdrive.exe
- <SYSTEM32>\conf\http-proxy\ext\OnRequest.rules.ext.txt
- <SYSTEM32>\conf\http-proxy\ip-list.rules.txt
- <SYSTEM32>\conf\http-proxy\OnRequest.rules.txt
- <SYSTEM32>\conf\http-proxy\plugins\ads_block\activate.f
- <SYSTEM32>\conf\http-proxy\plugins\ads_block\blank.gif
- <SYSTEM32>\conf\http-proxy\plugins\ads_block\index.f
- <SYSTEM32>\conf\http-proxy\OnUnknownMethod.rules.txt
- <SYSTEM32>\conf\http-proxy\OnRequestComplete.rules.txt
- <SYSTEM32>\conf\http-proxy\OnRequestPlugins.rules.txt
- <SYSTEM32>\conf\http-proxy\OnThreadConnect.rules.txt
- <SYSTEM32>\conf\http-proxy\wwwroot\en\CanalKitBlocked.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\11002.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\11004.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\4294966294.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\11001.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\10060.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\10061.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\10065.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10049.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10061.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10065.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\11001.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10060.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10051.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10053.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\en\10054.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\forbidden.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\index.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\QuotaEnded.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\create_ip_list.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\CanalKitBlocked2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\connect_error.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\connect_error2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\readheaders_error.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\10051.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\10053.html
- <SYSTEM32>\conf\http-proxy\wwwroot\errors\10054.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\unknown_method.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\readheaders_error2.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\retry.html
- <SYSTEM32>\conf\http-proxy\wwwroot\en\send_request_error2.html
- <SYSTEM32>\acFP.pid
- %WINDIR%\DelMe.reg
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'