Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'INICD' = '"%PROGRAM_FILES%\ENICD\32pgu.exe" -a'
- скрытых файлов
- '%PROGRAM_FILES%\ENICD\32pgu.exe' -gv
- %PROGRAM_FILES%\ENICD\rtv.exe
- %PROGRAM_FILES%\ENICD\UnInstall.exe
- %PROGRAM_FILES%\ENICD\rtb.dll
- %PROGRAM_FILES%\ENICD\setfile.zip
- %PROGRAM_FILES%\ENICD\32pgu.exe
- %PROGRAM_FILES%\ENICD\setfile.zip
- 'ty####53.pnsweb.net':80
- ty####53.pnsweb.net/ls_install.asp?ma#########################
- DNS ASK ty####53.pnsweb.net
- ClassName: 'SHELLDLL_DefView' WindowName: ''
- ClassName: 'SysListView32' WindowName: 'FolderView'
- ClassName: 'WorkerW' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''