Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'urlspace' = '%APPDATA%\Spiritsoft\urlspirit\urlcore.exe -h'
- %APPDATA%\Spiritsoft\urlspirit\urlcore.exe /h /r /t
- %APPDATA%\Spiritsoft\urlspirit\index.dat
- %APPDATA%\Spiritsoft\urlspirit\product.dat
- %APPDATA%\Spiritsoft\urlspirit\urlcore.exe
- %APPDATA%\Spiritsoft\urlspirit\index.dat
- 'ur#####it.spiritsoft.cn':80
- '22#.#34.51.2':80
- ur#####it.spiritsoft.cn/update/update.htm?q=####
- 22#.#34.51.2/Url/ID.asp
- DNS ASK ur#####it.spiritsoft.cn
- '<IP-адрес в локальной сети>':1036
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''