Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Live' = '%HOMEPATH%\AppData\winini.exe'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'OKjYBbK' = '%WINDIR%\usvchost.exe'
- cvtres.exe
- %HOMEPATH%\appdata\winini.exe
- %TEMP%\cvtres.exe
- '14#.0.36.34':80
- '%HOMEPATH%\appdata\winini.exe'
- '%TEMP%\cvtres.exe'