Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'VMware Workstation' = '%WINDIR%\vmware.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] 'Thunder' = '%WINDIR%\Thunder.exe'
- %TEMP%\e_4\krnln.fnr
- %TEMP%\e_4\eapi.fne
- %TEMP%\e_4\internet.fne
- %TEMP%\e_4\htmlview.fne
- %TEMP%\e_4\spec.fne
- %TEMP%\e_4\shell.fne
- %WINDIR%\vmware.exe
- <Текущая директория>\windows.ini
- %WINDIR%\thunder.exe
- %WINDIR%\vmware.exe
- %WINDIR%\thunder.exe
- DNS ASK 98##9.com