Техническая информация
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] '<SYSTEM32>\explore.exe' = '<SYSTEM32>\explore.exe'
- [<HKLM>\Software\Classes\txtfile\shell\open\command] '' = '%WINDIR%\SysWow64\explore.exe'
- Диспетчера задач (Taskmgr)
- Редактора реестра (RegEdit)
- %WINDIR%\syswow64\explore.exe
- %HOMEPATH%\desktop\260.exe
- %HOMEPATH%\desktop\25d.exe
- %HOMEPATH%\desktop\25a.exe
- %HOMEPATH%\desktop\257.exe
- %HOMEPATH%\desktop\253.exe
- %HOMEPATH%\desktop\250.exe
- %HOMEPATH%\desktop\24d.exe
- %HOMEPATH%\desktop\24a.exe
- %HOMEPATH%\desktop\243.exe
- %HOMEPATH%\desktop\240.exe
- %HOMEPATH%\desktop\23c.exe
- %HOMEPATH%\desktop\239.exe
- %HOMEPATH%\desktop\233.exe
- %HOMEPATH%\desktop\264.exe
- %HOMEPATH%\desktop\22f.exe
- %HOMEPATH%\desktop\229.exe
- %HOMEPATH%\desktop\226.exe
- %HOMEPATH%\desktop\222.exe
- %HOMEPATH%\desktop\21c.exe
- %HOMEPATH%\desktop\219.exe
- %HOMEPATH%\desktop\20f.exe
- %HOMEPATH%\desktop\20b.exe
- %HOMEPATH%\desktop\208.exe
- %HOMEPATH%\desktop\205.exe
- %HOMEPATH%\desktop\1fe.exe
- %HOMEPATH%\desktop\1fb.exe
- %HOMEPATH%\desktop\1f8.exe
- %HOMEPATH%\desktop\1f5.exe
- %HOMEPATH%\desktop\22c.exe
- %HOMEPATH%\desktop\267.exe
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK ss#.##static.com
- DNS ASK microsoft.com