Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{8E8B9B2-A9B5-3EF8-37DC-67FD219B6}] 'StubPath' = '%TEMP%\activex.exe'
- 'C:\Users\Dustin\AppData\Local\Temp\server.exe'
- 'C:\Users\Dustin\AppData\Local\Temp\server.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\desktop.ini
- %HOMEPATH%\Local Settings\History\desktop.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
- %TEMP%\381E3.dmp
- %TEMP%\activex.exe
- C:\Users\Dustin\AppData\Local\Temp\server.exe
- %TEMP%\dw.log
- %TEMP%\activex.exe
- 'sm##.gmail.com':587
- 'po#####runescape.com':80
- 'wp#d':80
- po#####runescape.com/server.exe
- wp#d/wpad.dat
- DNS ASK sm##.gmail.com
- DNS ASK po#####runescape.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'