Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ja479fiv9s399a' = '%HOMEPATH%\ja479fiv9s399a\22864.vbs'
- '%HOMEPATH%\ja479fiv9s399a\RqhvjKMVuOX.exe' Hppgup.HXM
- %HOMEPATH%\ja479fiv9s399a\VYVCScUqIx.EVE
- %HOMEPATH%\ja479fiv9s399a\41656.cmd
- %HOMEPATH%\ja479fiv9s399a\22864.vbs
- %HOMEPATH%\ja479fiv9s399a\xLLQrKRTNbS.PYG
- %HOMEPATH%\ja479fiv9s399a\RqhvjKMVuOX.exe
- %HOMEPATH%\ja479fiv9s399a\Hppgup.HXM
- %HOMEPATH%\ja479fiv9s399a\VYVCScUqIx.EVE
- %HOMEPATH%\ja479fiv9s399a\22864.vbs
- %HOMEPATH%\ja479fiv9s399a\41656.cmd
- %HOMEPATH%\ja479fiv9s399a\xLLQrKRTNbS.PYG
- %HOMEPATH%\ja479fiv9s399a\RqhvjKMVuOX.exe
- %HOMEPATH%\ja479fiv9s399a\Hppgup.HXM
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'