Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{1UN082KO-6MBQ-5421-QJ0P-6SMS872SK2RT}] 'StubPath' = '%WINDIR%\InstallDir\Server.exe restart'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HKCU' = '%WINDIR%\InstallDir\Server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HKLM' = '%WINDIR%\InstallDir\Server.exe'
- '%WINDIR%\explorer.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- %WINDIR%\InstallDir\Server.exe
- %APPDATA%\Microsoft\Windows\Abyu14.dat
- %APPDATA%\Microsoft\Windows\Abyu14.cfg
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe6568e93b69f81bd9a15bf4e4f995d9_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d1265d4b1da2516accde8a92f579b27_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %APPDATA%\Microsoft\Windows\Abyu14.dat
- %WINDIR%\InstallDir\Server.exe
- %APPDATA%\Microsoft\Windows\Abyu14.cfg
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe6568e93b69f81bd9a15bf4e4f995d9_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d1265d4b1da2516accde8a92f579b27_23ef5514-3059-436f-a4a7-4cefaab20eb1
- 'wa#####e1000.no-ip.info':81
- 'localhost':81
- 'localhost':1036
- DNS ASK wa#####e1000.no-ip.info
- ClassName: 'Shell_TrayWnd' WindowName: ''