Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Index' = '%HOMEPATH%\AppData\Microsoft Search Indexer.exe'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Index' = '%HOMEPATH%\systhaw.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '%HOMEPATH%\systhaw.exe'
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'HD Audio Process' = '%HOMEPATH%\systhaw.exe'
- %HOMEPATH%\appdata\microsoft search indexer.exe
- %HOMEPATH%\systhaw.exe
- %HOMEPATH%\appdata\microsoft search indexer.exe в %HOMEPATH%\systhaw.exe
- http://ap#.##pmania.com/
- DNS ASK ap#.##pmania.com
- DNS ASK f5#.net
- '%HOMEPATH%\appdata\microsoft search indexer.exe'
- '%HOMEPATH%\systhaw.exe'