Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Client Server Runtime Subsystem' = '"%ALLUSERSPROFILE%\Application Data\Windows\csrss.exe"'
- %TEMP%\runway.A
- %TEMP%\social-facebook.png
- %TEMP%\nsf3.tmp\System.dll
- %TEMP%\6893A5D897\state.tmp
- %ALLUSERSPROFILE%\Application Data\Windows\csrss.exe
- %TEMP%\574845_0065.jpg
- %TEMP%\PlusSignIcon.png
- %TEMP%\nsi2.tmp
- %TEMP%\home.css
- %TEMP%\print.css
- %TEMP%\TextArea.Special.Check.js
- %TEMP%\6893A5D897\state.tmp в %TEMP%\6893A5D897\state
- '15#.35.32.5':443
- '13#.#88.40.189':443
- 'localhost':1038
- ClassName: 'background' WindowName: ''
- ClassName: 'displacements' WindowName: ''
- ClassName: 'cockpit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'discretion' WindowName: ''