Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CleanMemoryUpdate' = '%PROGRAM_FILES%\CleanMemory\CleanMemUD.exe'
- %ALLUSERSPROFILE%\Start Menu\Programs\CleanMemory\Uninstall.lnk
- %PROGRAM_FILES%\CleanMemory\uninstall.exe
- %TEMP%\nsq3.tmp\DLLWebCount.dll
- %ALLUSERSPROFILE%\Start Menu\Programs\CleanMemory\CleanMemory.lnk
- %TEMP%\nsq3.tmp\KillProcDLL.dll
- %TEMP%\nsl2.tmp
- %PROGRAM_FILES%\CleanMemory\CleanMemUD.exe
- %PROGRAM_FILES%\CleanMemory\CleanMemory.exe
- 'cl###memory.net':80
- cl###memory.net/check_counter.php?pi####################
- DNS ASK cl###memory.net
- ClassName: 'Indicator' WindowName: '(null)'