Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'NVIDIA Driver' = '%TEMP%\windialog.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\msnappau.exe' = '%TEMP%\msnappau.exe:*:Enabled:HPLJET'
- '%TEMP%\msnappau.exe'
- '%TEMP%\usbdriver.exe'
- '<SYSTEM32>\alg.exe'
- %TEMP%\usbdriver.exe
- %TEMP%\windialog.exe
- %TEMP%\msnappau.exe
- %TEMP%\active.dll
- %TEMP%\detoured.dll
- '61.#00.2.73':80
- 61.#00.2.73/blog3/dread.php
- 61.#00.2.73/blog3/dwrite.php
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''