Техническая информация
- %PROGRAM_FILES%\Windows Service\fwgvzflg.exe Service\fwgvzflg.exe
- %TEMP%\RarSFX0\fbupdate.exe
- %PROGRAM_FILES%\Windows Service\fwgvzflg.exe (загружен из сети Интернет)
- ClassName: 'OLLYDBG' WindowName: ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\i_PT[1]
- %PROGRAM_FILES%\Windows Service\fwgvzflg.exe
- %PROGRAM_FILES%\Windows Service\wlcomm32.ini
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %TEMP%\RarSFX0\fbupdate.exe
- %TEMP%\RarSFX0\sqlite3.dll
- 'fb###k.uni.me':80
- 'localhost':1035
- fb###k.uni.me/i_PT
- DNS ASK fb###k.uni.me
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''