Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '%CommonProgramFiles%\20121023182511.exe.tmp' = ''
- %CommonProgramFiles%\lass.exe
- C:\ЧФ¶ЇКХ»хV4.1.exe
- C:\0303.Exe
- <SYSTEM32>\taskkill.exe /f /im Ksafetray.exe
- C:\plugin\MSG.DLL
- C:\plugin\FILE.DLL
- C:\plugin\GETSYSINFO.DLL
- %TEMP%\mymacro.zip
- C:\cfgdll.dll
- %APPDATA%\qmacro\qdisp.dll
- %TEMP%\ad-mymacro8.xml
- %TEMP%\2.tmp
- C:\ЧФ¶ЇКХ»хV4.1.exe
- C:\0303.Exe
- %TEMP%\3.tmp
- C:\plugin\SYS.DLL
- C:\plugin\WINDOW.DLL
- %TEMP%\plugin.zip
- C:\ЧФ¶ЇКХ»хV4.1.exe
- C:\0303.Exe
- %TEMP%\mymacro.zip
- %TEMP%\plugin.zip
- C:\0303.Exe в %CommonProgramFiles%\lass.exe
- DNS ASK zz####g.gicp.net
- ClassName: '' WindowName: ''