Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'chrome' = '%TEMP%\chrome\firefox.exe'
- скрытых файлов
- [Software\Far2\Plugins\FTP\Hosts]
- [Software\Far\Plugins\FTP\Hosts]
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'
- %TEMP%\421202.bat
- %HOMEPATH%\ixhAPTQSGa.txt
- %HOMEPATH%\ixhAPTQSGa.txt
- DNS ASK dn#.##ftncsi.com
- DNS ASK rc######imobiliaria.com.br
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''