Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe <SYSTEM32>\netconfig32.exe'
- скрытых файлов
- расширений файлов
- [<HKCU>\Software\Microsoft\Internet Explorer\Main] 'Window Title' = 'Hacked by sk0r'
- <SYSTEM32>\Save\Toshiba_Account_details.doc exe
- <SYSTEM32>\Save\eTicket_wm_06_toshiba.txt exe
- <SYSTEM32>\Save\Your_eTicket_wm06exe
- <SYSTEM32>\Save\Fifa Wm 2006 Ratespielexe
- <SYSTEM32>\Save\Toshiba_wm_06_ticket.doc exe
- <SYSTEM32>\csrss32.exe
- <SYSTEM32>\netconfig32.exe
- <SYSTEM32>\213872.exe
- %WINDIR%\HtmlApi17.dll
- <DRIVERS>\etc\protocol
- <DRIVERS>\etc\services
- ClassName: 'Shell_TrayWnd' WindowName: ''