Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '%APPDATA%\ATManager\apmanager.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'apmanager.exe' = '%APPDATA%\ATManager\apmanager.exe silent'
- '%APPDATA%\ATManager\apmanager.exe'
- %APPDATA%\ATManager\languages\Slovak.lng
- %APPDATA%\ATManager\languages\Spanish.lng
- %APPDATA%\ATManager\languages\Italian.lng
- %APPDATA%\ATManager\languages\Portuguese.lng
- %APPDATA%\ATManager\languages\template.lng
- %APPDATA%\ATManager\iplog
- %APPDATA%\ATManager\ispinfo
- %APPDATA%\ATManager\uninstall.exe
- %HOMEPATH%\Desktop\ATManager.lnk
- %APPDATA%\ATManager\settings.ini
- %APPDATA%\ATManager\languages\Czech.lng
- %APPDATA%\ATManager\apmanager.exe
- %APPDATA%\ATManager\wallpaper.jpg
- %APPDATA%\ATManager\languages\Danish.lng
- %APPDATA%\ATManager\languages\French.lng
- %APPDATA%\ATManager\languages\German.lng
- %APPDATA%\ATManager\languages\Dutch.lng
- %APPDATA%\ATManager\languages\English.lng
- '93.##8.114.164':80
- 93.##8.114.164/m5tools/ip.php
- 93.##8.114.164/m5tools/whois.php?sh###
- 93.##8.114.164/avails
- 93.##8.114.164/m5install/1/1
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'