Техническая информация
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\nsi2.tmp\GetVersion.dll
- %TEMP%\nsi2.tmp\UserInfo.dll
- %TEMP%\nsi2.tmp\registry.dll
- %TEMP%\nsi2.tmp\FirstResult.txt
- %TEMP%\nsi2.tmp\manlib.dll
- %TEMP%\nsi2.tmp\blowfish.dll
- %TEMP%\nsi2.tmp\header.bmp
- %TEMP%\nsi2.tmp\nsDialogs.dll
- %TEMP%\nsi2.tmp\System.dll
- %TEMP%\nsi2.tmp\Math.dll
- %TEMP%\nsi2.tmp\AVD.dll
- %TEMP%\nsi2.tmp\System.dll
- %TEMP%\nsi2.tmp\registry.dll
- %TEMP%\nsi2.tmp\nsDialogs.dll
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\nsi2.tmp\UserInfo.dll
- %TEMP%\nsi2.tmp\Math.dll
- %TEMP%\nsi2.tmp\FirstResult.txt
- %TEMP%\nsi2.tmp\blowfish.dll
- %TEMP%\nsi2.tmp\AVD.dll
- %TEMP%\nsi2.tmp\manlib.dll
- %TEMP%\nsi2.tmp\header.bmp
- %TEMP%\nsi2.tmp\GetVersion.dll
- 'www.fg###speast.com':80
- www.fg###speast.com/FCL_Co_Unq_remote.php
- DNS ASK www.fg###speast.com
- ClassName: '#32770' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''