Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\AudioSrv] 'Start' = '00000002'
- '%TEMP%\_ir_sf7_temp_0\irsetup.exe' "__IRAFN:%TEMP%\setup.exe"
- '%HOMEPATH%\Local Settings\hsmlbeeflu' a -s%TEMP%\server.exe
- '%TEMP%\setup.exe'
- '%TEMP%\server.exe'
- %TEMP%\_ir_sf7_temp_0\IRIMG2.BMP
- %TEMP%\_ir_sf7_temp_0\IRIMG1.BMP
- %TEMP%\cthrurold
- <SYSTEM32>\51e92691.rdb
- %TEMP%\floxlwqgtc.dat
- %TEMP%\server.exe
- %TEMP%\setup.exe
- %TEMP%\_ir_sf7_temp_0\irsetup.exe
- %TEMP%\_ir_sf7_temp_0\irsetup.dat
- %HOMEPATH%\Local Settings\hsmlbeeflu
- %TEMP%\cthrurold
- %TEMP%\server.exe
- %TEMP%\_ir_sf7_temp_0\irsetup.dat
- %TEMP%\floxlwqgtc.dat в %ALLUSERSPROFILE%\Application Data\Storm\update\jnxlj.cc3
- %HOMEPATH%\Local Settings\hsmlbeeflu в %HOMEPATH%\Local Settings\hsm
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'