Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = ''
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = ''
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'CMPS' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'CMPS' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'prmps' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'scd' = ''
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{5U16KF68-W227-JVY4-FIT2-D5N11072Y12X}] 'StubPath' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'CMPS' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'CMPS' = ''
- '%WINDIR%\explorer.exe'
- '<SYSTEM32>\svchost.exe'
- %WINDIR%\explorer.exe
- %APPDATA%\Microsoft\Windows\SSCV.dat
- %APPDATA%\Microsoft\Windows\SSCV.xtr
- %APPDATA%\Microsoft\Windows\SSCV.cfg
- <SYSTEM32>\XPMD\cmps.exe
- %APPDATA%\Microsoft\Windows\SSCV.dat
- <SYSTEM32>\XPMD\cmps.exe
- %APPDATA%\Microsoft\Windows\SSCV.cfg
- 'fr####a.3eeweb.com':80
- 'localhost':1038
- http://fr####a.3eeweb.com/plugin.xtr
- DNS ASK fr####a.3eeweb.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''