Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'PLZFD' = '%HOMEPATH%\PLZFD\start.vbs'
- '%HOMEPATH%\PLZFD\Autoit3.29121.exe' RWGESLIU.dat
- '%HOMEPATH%\PLZFD\Autoit3.29121.exe' 334851.dat
- '<SYSTEM32>\taskkill.exe' /IM mshta.exe
- '<SYSTEM32>\mshta.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\PLZFD\run.vbs"
- %HOMEPATH%\PLZFD\run.vbs
- %HOMEPATH%\PLZFD\settings.ini
- %HOMEPATH%\disable.txt
- %HOMEPATH%\PLZFD\RWGESLIU.dat
- %HOMEPATH%\PLZFD\818287.dat
- %HOMEPATH%\PLZFD\334851.dat
- %HOMEPATH%\PLZFD\Autoit3.29121.exe
- %HOMEPATH%\PLZFD\155200.dat
- %HOMEPATH%\PLZFD\Autoit3.29121.exe
- %HOMEPATH%\PLZFD\settings.ini
- %HOMEPATH%\PLZFD\run.vbs
- %HOMEPATH%\PLZFD\334851.dat
- %HOMEPATH%\PLZFD\818287.dat
- %HOMEPATH%\PLZFD\155200.dat
- %HOMEPATH%\PLZFD\RWGESLIU.dat
- ClassName: '' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''