Техническая информация
- [<HKCU>\Software\Headlight\GetRight\]
- [<HKLM>\SOFTWARE\FileZilla Client]
- [<HKLM>\SOFTWARE\Wow6432Node\FileZilla Client]
- [<HKCU>\SOFTWARE\FileZilla Client]
- [<HKCU>\Software\RIT\The Bat!]
- [<HKLM>\Software\FlashFXP]
- [<HKLM>\Software\Wow6432Node\FlashFXP]
- [<HKCU>\Software\Headlight\GetRight]
- [<HKCU>\Software\IMVU]
- [<HKCU>\Software\mIRC]
- %APPDATA%\mozilla\firefox\profiles.ini
- %APPDATA%\thunderbird\profiles.ini
- %APPDATA%\ccleaner\ccleaner.dat
- %APPDATA%\ccleaner\ccleaner.ini
- %APPDATA%\ccleaner\branding.dll
- %APPDATA%\ccleaner\ccleaner.exe
- %APPDATA%\ccleaner\ccleaner64.exe
- http://nc#.#vast.com/ncc.txt
- DNS ASK nc#.#vast.com
- '%APPDATA%\ccleaner\ccleaner64.exe'