Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\189E75.lnk
- '%TEMP%\4222805F.EXE' reinnet
- '%HOMEPATH%\My Documents\T8F48E\8A899A\TF02D47.EXE'
- '%WINDIR%\explorer.exe' <Текущая директория>\
- %HOMEPATH%\My Documents\T8F48E\327CBB\HtmlView.fne
- %HOMEPATH%\My Documents\T8F48E\327CBB\internet.fne
- %HOMEPATH%\My Documents\T8F48E\327CBB\eAPI.fne
- %HOMEPATH%\My Documents\T8F48E\327CBB\eCompress.fne
- %HOMEPATH%\My Documents\T8F48E\327CBB\krnln.fnr
- %TEMP%\4222805F.EXE
- %HOMEPATH%\My Documents\T8F48E\6133A7\c47475.txt
- %HOMEPATH%\My Documents\T8F48E\327CBB\OLEACC.DLL
- %HOMEPATH%\My Documents\T8F48E\327CBB\RegEx.fnr
- %HOMEPATH%\My Documents\T8F48E\327CBB\dp1.fne
- %TEMP%\E_N4\internet.fne
- %TEMP%\E_N4\eAPI.fne
- %TEMP%\E_N4\krnln.fnr
- %TEMP%\E_N4\HtmlView.fne
- %TEMP%\E_N4\dp1.fne
- %TEMP%\E_N4\OLEACC.DLL
- %HOMEPATH%\My Documents\T8F48E\8A899A\TF02D47.EXE
- %TEMP%\E_N4\RegEx.fnr
- %TEMP%\E_N4\eCompress.fne
- %TEMP%\4222805F.EXE
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: '' WindowName: ''