Техническая информация
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe'
- '%TEMP%\RarSFX0\PchppIc.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- [<HKCU>\Software\IMVU\username]
- C:\.lnk
- %TEMP%\RarSFX0\GrYnjUOghDD.bin
- %TEMP%\RarSFX0\PchppIc.exe
- 're#####r.bplaced.net':80
- 'wp#d':80
- http://re#####r.bplaced.net/keybase/post.php?ty##########################################################
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK re#####r.bplaced.net
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''