Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<Полный путь к вирусу>' = '<Полный путь к вирусу>:*:Enabled:Microsoft Office'
- [<HKCU>\Software\CoffeeCup Software\Internet\Profiles]
- [<HKCU>\Software\FTPWare\CoreFTP\Sites]
- [<HKCU>\software\far\plugins\ftp\hosts]
- [<HKCU>\software\far2\plugins\ftp\hosts]
- %TEMP%\MSWQC.tmp
- 'th###.#hell4pets.com':20051
- 'tw#.####ly-good-books.com':20051
- 'tw#.####ly-good-books.com':80
- 'th###.#hell4pets.com':80
- th###.#hell4pets.com/
- tw#.####ly-good-books.com/
- DNS ASK th###.#hell4pets.com
- DNS ASK tw#.####ly-good-books.com
- ClassName: '' WindowName: ''