Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Miranda]
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Trillian]
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKLM>\Software\Wow6432Node\Ghisler\Total Commander]
- [<HKCU>\Software\RimArts\B2\Settings]
- [<HKCU>\Software\Microsoft\Internet Account Manager\Accounts]
- [<HKCU>\SOFTWARE\Far\Plugins\FTP\Hosts]
- [<HKCU>\Software\Microsoft\Windows Mail]
- [<HKCU>\Software\FileZilla]
- [<HKLM>\SOFTWARE\Wow6432Node\FlashFXP\3]
- [<HKCU>\Software\CoffeeCup Software\Internet\Profiles]
- %APPDATA%\thunderbird\profiles.ini
- %APPDATA%\mozilla\firefox\profiles.ini
- ClassName: 'AVP.AlertDialog', WindowName: ''
- ClassName: 'AVP.AhAppChangedDialog', WindowName: ''
- ClassName: 'AVP.AhLearnDialog', WindowName: ''
- %TEMP%\pinch3.exe
- %TEMP%\buckethead+2948487234_9a092b226d.jpg
- 'sm##.mail.ru':25
- DNS ASK sm##.mail.ru
- ClassName: '' WindowName: 'Ñîçäà òü ïðà âèëî äëÿ PINCH3.EXE'
- ClassName: '' WindowName: 'Create rule for PINCH3.EXE'
- ClassName: '' WindowName: 'Г‚Гèìà ГГЁГҐ: Гåêîòîðûå êîìïîГГҐГГІГ» èçìåГèëèñü'
- ClassName: '' WindowName: 'Warning: Components Have Changed'
- ClassName: '' WindowName: 'Ñêðûòûé ïðîöåññ çà ïðà øèâà åò ñåòåâîé äîñòóï'
- ClassName: '' WindowName: 'Hidden Process Requests Network Access'
- '%TEMP%\pinch3.exe'