Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ClientServerRuntime' = '%WINDIR%\csrss.exe'
- '%WINDIR%\csrss.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\tor.ftp.server[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ipaddress[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\tor.ftp.password[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\tor.ftp.username[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\adfly5[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\tor.au.script[1].html
- %WINDIR%\csrss.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\linkbuck5[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\tor.preset.command[1].html
- 'localhost':1039
- 'mi##eo.net':80
- mi##eo.net/rd/tor.ftp.server.html
- mi##eo.net/rd/ipaddress.html
- mi##eo.net/rd/tor.ftp.password.html
- mi##eo.net/rd/tor.ftp.username.html
- mi##eo.net/rd/tor.preset.command.html
- mi##eo.net/rd/tor.au.script.html
- mi##eo.net/rd/adfly5.html
- mi##eo.net/rd/linkbuck5.html
- DNS ASK mi##eo.net
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: '' WindowName: ''