Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\rigmmeb.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\sdeivki.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\bdobvfk.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\kysjmti.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\qwatjvb.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'LoadAppInit_DLLs' = '00000001'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\esvmpjf.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\dsdumuc.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\wapnzoh.dll'
- %TEMP%\flash_player_10.0_update.exe
- <SYSTEM32>\logonui.exe
- <SYSTEM32>\logonui.exe /status /shutdown
- <SYSTEM32>\logonui.exe
- <SYSTEM32>\sdeivki.dll
- <SYSTEM32>\qwatjvb.dll
- <SYSTEM32>\rigmmeb.dll
- <SYSTEM32>\bdobvfk.dll
- <SYSTEM32>\kysjmti.dll
- %ALLUSERSPROFILE%\Application Data\id.tmp
- %TEMP%\flash_player_10.0_update.exe
- <SYSTEM32>\esvmpjf.dll
- <SYSTEM32>\dsdumuc.dll
- <SYSTEM32>\wapnzoh.dll
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'StatusWindowClass' WindowName: ''