Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '73hii7wh36' = '%HOMEPATH%\73hii7wh36\46756.vbs'
- %WINDIR%\microsoft.net\framework\v2.0.50727\regsvcs.exe
- %WINDIR%\microsoft.net\framework\v2.0.50727\regsvcs.exe
- %HOMEPATH%\73hii7wh36\ryukaxtbhjyz.eas
- %HOMEPATH%\73hii7wh36\eknx.exe
- %HOMEPATH%\73hii7wh36\rtljmhebavl.eof
- %HOMEPATH%\73hii7wh36\igvvbvekfgp.hzn
- %HOMEPATH%\73hii7wh36\45489.cmd
- %HOMEPATH%\73hii7wh36\46756.vbs
- %HOMEPATH%\73hii7wh36\ryukaxtbhjyz.eas
- %HOMEPATH%\73hii7wh36\eknx.exe
- %HOMEPATH%\73hii7wh36\rtljmhebavl.eof
- %HOMEPATH%\73hii7wh36\igvvbvekfgp.hzn
- %HOMEPATH%\73hii7wh36\46756.vbs
- %HOMEPATH%\73hii7wh36\45489.cmd
- ClassName: 'EDIT' WindowName: ''
- '%HOMEPATH%\73hii7wh36\eknx.exe' rTlJmHEbaVL.EOF