Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Template Manager' = '%APPDATA%\manager.exe'
- %HOMEPATH%\desktop\508softwareandos.doc
- %HOMEPATH%\desktop\contoso.cer
- %HOMEPATH%\desktop\dashborder_120.bmp
- %HOMEPATH%\desktop\february_catalogue__2015.doc
- %HOMEPATH%\desktop\hanni_umami_chapter.doc
- %HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
- %HOMEPATH%\desktop\sdszfo.docx
- %HOMEPATH%\desktop\testcertificate.cer
- %HOMEPATH%\desktop\weeklysheet1215.doc
- %APPDATA%\manager.exe
- %APPDATA%\data.wnns
- %HOMEPATH%\desktop\508softwareandos.doc.wannasmile
- %HOMEPATH%\desktop\contoso.cer.wannasmile
- %HOMEPATH%\desktop\dashborder_120.bmp.wannasmile
- %HOMEPATH%\desktop\february_catalogue__2015.doc.wannasmile
- %HOMEPATH%\desktop\hanni_umami_chapter.doc.wannasmile
- %HOMEPATH%\desktop\icq.lnk.wannasmile
- %HOMEPATH%\desktop\mail.ru agent.lnk.wannasmile
- %HOMEPATH%\desktop\qip 2012.lnk.wannasmile
- %HOMEPATH%\desktop\sdksampleunprivdeveloper.cer.wannasmile
- %HOMEPATH%\desktop\sdszfo.docx.wannasmile
- %HOMEPATH%\desktop\telegram.lnk.wannasmile
- %HOMEPATH%\desktop\testcertificate.cer.wannasmile
- %HOMEPATH%\desktop\total commander 64 bit.lnk.wannasmile
- %HOMEPATH%\desktop\weeklysheet1215.doc.wannasmile
- %APPDATA%\manager.exe
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''