Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'jsafesurf' = '%WINDIR%\Help32\safesurf.exe'
- %WINDIR%\Help32\Helper.exe
- %WINDIR%\Help32\safesurf.exe
- %WINDIR%\Help32\Helper.exe
- %WINDIR%\Help32\safesurf.exe
- %WINDIR%\Help32\log.txt
- %WINDIR%\Help32\up.new.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\7.tmp
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\7.tmp
- %WINDIR%\Help32\up.new.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\4.tmp
- 'je##wap.com':80
- 'dl.##tswap.net':80
- 'wp#d':80
- dl.##tswap.net/j/sf/up.exe
- je##wap.com/
- dl.##tswap.net/j/sf/h.txt
- wp#d/wpad.dat
- dl.##tswap.net/j/sf/v.txt
- DNS ASK je##wap.com
- DNS ASK dl.##tswap.net
- DNS ASK wp#d
- ClassName: '' WindowName: 'JetSwap SafeSurf'
- ClassName: 'Shell_TrayWnd' WindowName: ''