Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'don' = '%ALLUSERSPROFILE%\Common Files\don.exe'
- %TEMP%\is-8Q39C.tmp\My_Email_Sender.setup.tmp /SL5="$101A2,1082298,57344,%TEMP%\My_Email_Sender.setup.exe"
- %TEMP%\My_Email_Sender.setup.exe
- %ALLUSERSPROFILE%\Common Files\don.exe
- %TEMP%\is-8Q39C.tmp\My_Email_Sender.setup.tmp
- %TEMP%\is-HJTBP.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-HJTBP.tmp\_isetup\_shfoldr.dll
- %ALLUSERSPROFILE%\Common Files\don.exe
- %TEMP%\My_Email_Sender.setup.exe
- %TEMP%\~DF2187.tmp
- 'localhost':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''