Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Desktop' = '%APPDATA%\Microsoft\Internet Explorer\Desktop.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\Microsoft\Internet Explorer\Desktop.exe' = '%APPDATA%\Microsoft\Internet Explorer\Desktop.exe:*:Enabled:eMule'
- %APPDATA%\Microsoft\Internet Explorer\Desktop.exe
- %TEMP%\keygen.exe
- %APPDATA%\Microsoft\Internet Explorer\Desktop.exe
- %TEMP%\keygen.exe
- 'ub####-jabber.de':5222
- 'ja####.yeahnah.co.nz':5222
- 'in#####t-exception.de':5222
- DNS ASK ub####-jabber.de
- DNS ASK _x########nt._tcp.ubuntu-jabber.de
- DNS ASK ma###bber.de
- DNS ASK _x#######ent._tcp.macjabber.de
- DNS ASK ja####.yeahnah.co.nz
- DNS ASK _x#########t._tcp.internet-exception.de
- DNS ASK in#####t-exception.de
- DNS ASK _x#########t._tcp.jabber.yeahnah.co.nz
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''