Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '73rne39uwu' = '%HOMEPATH%\73rne39uwu\70171.vbs'
- '%HOMEPATH%\73rne39uwu\IHMex.exe' qDeZklvy.KXG
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\73rne39uwu\HmitfwCdGC.ELB
- %HOMEPATH%\73rne39uwu\86429.cmd
- %HOMEPATH%\73rne39uwu\70171.vbs
- %HOMEPATH%\73rne39uwu\onULhmxnBabL.EMP
- %HOMEPATH%\73rne39uwu\IHMex.exe
- %HOMEPATH%\73rne39uwu\qDeZklvy.KXG
- %HOMEPATH%\73rne39uwu\HmitfwCdGC.ELB
- %HOMEPATH%\73rne39uwu\70171.vbs
- %HOMEPATH%\73rne39uwu\86429.cmd
- %HOMEPATH%\73rne39uwu\onULhmxnBabL.EMP
- %HOMEPATH%\73rne39uwu\IHMex.exe
- %HOMEPATH%\73rne39uwu\qDeZklvy.KXG
- '95.##1.142.14':3333
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'