Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Ps' = '<SYSTEM32>\imetlws.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'Ps' = '<SYSTEM32>\imetlws.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SVCH0SAT' = '<SYSTEM32>\SVCH0SAT.EXE'
- <SYSTEM32>\SVCH0SAT.EXE
- %WINDIR%\imetlws.exe
- %TEMP%\is-O69UL.tmp\jdbbx5setup.tmp /SL5="$50036,1632664,221696,%TEMP%\jdbbx5setup.exe"
- %TEMP%\jdbbx5setup.exe
- %TEMP%\fgfgf.exe
- <SYSTEM32>\ping.exe 127.1
- <SYSTEM32>\cmd.exe /c %TEMP%\~god2.bat
- <SYSTEM32>\imetlbb.dll
- <SYSTEM32>\caewnt.dll
- <SYSTEM32>\SVCH0SAT.EXE
- <SYSTEM32>\imetlws.exe
- %WINDIR%\Ps.dll
- %WINDIR%\imetlws.exe
- %TEMP%\is-1S019.tmp\UpdateIcon.dll
- %TEMP%\is-O69UL.tmp\jdbbx5setup.tmp
- %TEMP%\fgfgf.exe
- %TEMP%\jdbbx5setup.exe
- %TEMP%\~god2.bat
- %TEMP%\is-1S019.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-1S019.tmp\_isetup\_RegDLL.tmp
- %TEMP%\fgfgf.exe
- '12#.#2.170.49':3388
- ClassName: 'Container' WindowName: ''
- ClassName: 'Maxthon2_Frame' WindowName: ''
- ClassName: '_____TTFrameWnd__101__' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TianLongBaBu WndClass' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''