Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{6VM2OP2T-H070-LSDP-7D22-Q6QP1F765NN1}] 'StubPath' = ''
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{6VM2OP2T-H070-LSDP-7D22-Q6QP1F765NN1}] 'StubPath' = '<SYSTEM32>\microsoft\windows.exe Restart'
- <SYSTEM32>\Microsoft\windows.exe
- %TEMP%\spy.exe
- <SYSTEM32>\svchost.exe
- %WINDIR%\Explorer.EXE
- %APPDATA%\logs.dat
- %TEMP%\XxX.xXx
- %TEMP%\UuU.uUu
- %TEMP%\spy.exe
- <SYSTEM32>\Microsoft\windows.exe
- %TEMP%\XX--XX--XX.txt
- %APPDATA%\logs.dat
- <SYSTEM32>\Microsoft\windows.exe
- %TEMP%\XxX.xXx
- %TEMP%\UuU.uUu
- %TEMP%\XX--XX--XX.txt
- 'localhost':288
- 'me#####eman.zapto.org':288
- DNS ASK me#####eman.zapto.org
- ClassName: 'Shell_TrayWnd' WindowName: ''