Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WPlugMgr] 'ImagePath' = '%HOMEPATH%\My Documents\PlugMgrs\PlugMgrs.exe -s'
- [<HKLM>\SYSTEM\ControlSet001\Services\WPlugMgr] 'Start' = '00000002'
- '%HOMEPATH%\My Documents\PlugMgrs\PlugMgrs.exe' -s
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\xy_19820311[1]
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\xy_19820311[1]
- %HOMEPATH%\My Documents\PlugMgrs\PlugMgrs.exe.tmp
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\xy_19820311[1]
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\xy_19820311[1]
- %HOMEPATH%\My Documents\PlugMgrs\PlugMgrs.exe.tmp в %HOMEPATH%\My Documents\PlugMgrs\PlugMgrs.exe
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\xy_19820311[1]
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\xy_19820311[1]
- 't.##.com':80
- 'localhost':5772
- http://t.##.com/xy_19820311
- DNS ASK t.##.com
- ClassName: 'Shell_TrayWnd' WindowName: ''