Техническая информация
- [<HKLM>\SOFTWARE\Classes\txfile4\shell\open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\txfile5\shell\open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\txfile2\shell\open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\txfile\shell\open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\txfile1\shell\open\Command] '' = ''
- %HOMEPATH%\Desktop\ёЯЗеµзУ°.tx5
- %HOMEPATH%\Desktop\ФЪПЯРЎУОП·.tx2
- %HOMEPATH%\Desktop\hao123µјєЅ.tx4
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.tx
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\tj[1].html
- %WINDIR%\mui\mui.exe
- %HOMEPATH%\Desktop\Internet Explorer.tx
- %WINDIR%\regedit.reg
- %WINDIR%\Offline Web Pages\ico\tao.ico
- %WINDIR%\Offline Web Pages\ico\hao123.ico
- %WINDIR%\Offline Web Pages\369\369safe.exe
- %WINDIR%\Offline Web Pages\ico\tx2.ico
- %WINDIR%\Offline Web Pages\ico\game.ico
- %WINDIR%\Offline Web Pages\ico\mv.ico
- %WINDIR%\Offline Web Pages\ico\movie.ico
- %WINDIR%\regedit.exe /s regedit.reg
- %WINDIR%\regedit.reg
- 'dh.##919.com':80
- 'localhost':1037
- dh.##919.com/tj.html?36#
- DNS ASK dh.##919.com
- '<IP-адрес в локальной сети>':1038
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''