Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Winscript' = 'C:\MicrosoftPro\MicrosoftPro.exe'
- C:\MicrosoftPro\MicrosoftPro.exe
- opera.exe
- skype.exe
- iexplore.exe
- firefox.exe
- %TEMP%\aut2.tmp
- C:\MicrosoftPro\MicrosoftPro.exe
- %TEMP%\aut1.tmp
- C:\MicrosoftPro\WinErrOr.mp3
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- ClassName: 'WMPlayerApp' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Type32_Main_Window' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ReBarWindow32' WindowName: ''
- ClassName: 'WMP9DeskBand' WindowName: 'WMP9DeskBand'