Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'application.pif' = '<SYSTEM32>\application.pif'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\application.pif
- <SYSTEM32>\application.pif
- 'ce###.phpnet.org':80
- ce###.phpnet.org/administrator/components/com_remository/CRNJEUFU
- DNS ASK ce###.phpnet.org
- ClassName: 'Address Band Root' WindowName: ''
- ClassName: 'Edit' WindowName: ''
- ClassName: 'msctls_statusbar32' WindowName: ''
- ClassName: 'TabWindowClass' WindowName: ''
- ClassName: 'rebarwindow32' WindowName: ''
- ClassName: 'WorkerW' WindowName: ''
- ClassName: 'ComboBox' WindowName: ''
- ClassName: 'comboboxex32' WindowName: ''