Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{DD7D4640-4464-48C0-83FD-21338366D2D3}' = ''
- '<SYSTEM32>\cmd.exe' /c ""<Текущая директория>\_Ms.bat" "
- ClassName: 'AVP.AlertDialog' WindowName: ''
- <Текущая директория>\_Ms.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\count[1].htm
- %ProgramFiles%\Internet Explorer\tray.cur
- %ProgramFiles%\Internet Explorer\Mfc42.sys
- %ProgramFiles%\Internet Explorer\Mfc42.tdm
- %ProgramFiles%\Internet Explorer\Mfc42.sys
- '88###8.3322.org':80
- 'www.ha##23.com':80
- http://88###8.3322.org/acc/logo.gif
- http://www.ha##23.com/
- http://88###8.3322.org/acc/count/count.asp
- DNS ASK 88###8.3322.org
- DNS ASK www.ha##23.com
- ClassName: '#32770' WindowName: 'ИрРЗїЁїЁЙПНш°ІИ«ЦъКЦ - IE·АВ©ЗЅ'
- ClassName: '#32770' WindowName: '???????????????????? - IE??????'
- ClassName: 'aliluya' WindowName: 'hahaha'
- ClassName: 'Edit' WindowName: '54321Test'
- ClassName: 'Edit' WindowName: '12345Test'
- ClassName: '#32770' WindowName: 'IEЦґРР±Ј»¤'
- ClassName: '#32770' WindowName: 'ИрРЗЧўІб±нјаїШМбКѕ'
- ClassName: '#32770' WindowName: '??????????????????'
- ClassName: '#32770' WindowName: 'IE ????????'
- ClassName: '#32770' WindowName: 'IE????????'
- ClassName: '#32770' WindowName: 'IE ЦґРР±Ј»¤'