Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 'ShellDeskBarApp' = '{2e9a8f8f-8ffe-45e5-8551-04e1d5ef3b62}'
- <SYSTEM32>\regsvr32.exe /s %TEMP%\windll.dll
- <SYSTEM32>\ntvdm.exe -f -i1
- %TEMP%\split-pst-2.0.log
- %TEMP%\windll.dll
- %CommonProgramFiles%\Shell\ShellDeskBarApp.dll
- %TEMP%\split-pst-2.0.exe
- %WINDIR%\Temp\scs3.tmp
- %WINDIR%\Temp\scs4.tmp
- %TEMP%\windll.dll
- %WINDIR%\Temp\scs4.tmp
- %WINDIR%\Temp\scs3.tmp
- '20#.#26.167.92':80
- 20#.#26.167.92/tor2_5/trun2.php?tn##############
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-9b8.9bc.370001'
- ClassName: 'MozillaUIWindowClass' WindowName: ''