Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'a.exe' = '%WINDIR%\a.exe'
- '%TEMP%\is-1FL6Q.tmp\setup-4.4.1a.tmp' /SL5="$50036,1783372,53248,%TEMP%\setup-4.4.1a.exe"
- '%TEMP%\setup-4.4.1a.exe'
- '%TEMP%\a.exe'
- ClassName: 'TibiaClient' WindowName: ''
- %WINDIR%\a.exe
- %TEMP%\is-1FL6Q.tmp\setup-4.4.1a.tmp
- %TEMP%\setup-4.4.1a.exe
- %TEMP%\a.exe
- 'zo##an.pl':80
- zo##an.pl/status.php?ip##################
- DNS ASK zo##an.pl
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''