Техническая информация
- [<HKLM>\SOFTWARE\Classes\lnkfile\Shell\Open\Command] '' = '"%WINDIR%\TKLobby.ico" "%1"'
- [<HKLM>\SOFTWARE\Classes\none\Shell\Open\Command] '' = '"" "%1"'
- '%WINDIR%\patch\update.exe' -u/kbag.exe
- '%WINDIR%\kbag.exe'
- '%WINDIR%\chand.exe'
- '%WINDIR%\patch\update.exe' (загружен из сети Интернет)
- %WINDIR%\patch\update.exe
- %TEMP%\767.tmp
- %HOMEPATH%\Favorites\єГНжРЎУОП·.lne
- %HOMEPATH%\Desktop\єГНжРЎУОП·.lne
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\57070[1].exe
- %WINDIR%\chand.exe
- %WINDIR%\config.ini
- %WINDIR%\kbag.exe
- %WINDIR%\TKLobby.ico
- %TEMP%\767.tmp
- 'an##i1.com':80
- 'localhost':1036
- an##i1.com/updata/57070.exe
- DNS ASK an##i1.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''