Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TaxiSystem.exe' = '<LS_APPDATA>\UnionTablettt\TaxiSystem.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSMSGS' = '"%PROGRAM_FILES%\Messenger\msmsgs.exe" /background'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Hotwells.exe' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TaxiSystem.exe' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'InsertSound.exe' = ''
- [<HKCU>\Software\Microsoft\MessengerService]
- <LS_APPDATA>\UnionTablettt\TaxiSystem.exe
- 'www.va#####roventura.com.br':80
- 'www.ma##ynk.pl':80
- 'www.in####nights.net':80
- 'www.ca###ezo.com':80
- 'www.ma###llagan.com':80
- 'www.gr###elli.com':80
- www.va#####roventura.com.br/fotos/washb.php
- www.ma##ynk.pl/galeria/washb.php
- www.in####nights.net/menu/washb.php
- www.ca###ezo.com/site/Itecf.php
- www.ma###llagan.com/Itecf.php
- www.gr###elli.com/fonts/adonet.php
- DNS ASK www.va#####roventura.com.br
- DNS ASK www.ma##ynk.pl
- DNS ASK www.in####nights.net
- DNS ASK www.gr###elli.com
- DNS ASK www.ca###ezo.com
- DNS ASK www.ma###llagan.com
- '<IP-адрес в локальной сети>':1034
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''