Техническая информация
- [<HKLM>\SOFTWARE\Classes\exefile\shell\open\command] '' = '%WINDIR%\system\svchost.exe "%1" %*'
- '%TEMP%\is-874E3.tmp\netcut.tmp' /SL5="$1010A,2020131,66048,%WINDIR%\netcut.exe"
- '%WINDIR%\netcut.exe'
- '%WINDIR%\system\svchost.exe'
- %TEMP%\is-874E3.tmp\netcut.tmp
- %TEMP%\is-4A25A.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-4A25A.tmp\_isetup\_shfoldr.dll
- %WINDIR%\netcut.exe
- <SYSTEM32>\MSWINSCK.OCX
- %WINDIR%\system\svchost.exe
- %TEMP%\~DF7C58.tmp
- 'ir#.##eenode.net':6667
- DNS ASK ir#.##eenode.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'TfrmClock' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'itme'