Техническая информация
- [HKLM\System\CurrentControlSet\Services\Dhcp] 'Start' = '00000002'
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles(x86)%\fastsok\slon\isld.vbs
- %ProgramFiles(x86)%\fastsok\slon\straho.bat
- %ProgramFiles(x86)%\fastsok\slon\2.txt
- %ProgramFiles(x86)%\fastsok\slon\1.txt
- %ProgramFiles(x86)%\fastsok\slon\do.vbs
- %ProgramFiles(x86)%\fastsok\slon\uninstall.exe
- %ProgramFiles(x86)%\fastsok\slon\uninstall.ini
- %ProgramFiles(x86)%\fastsok\slon\bat2.bat
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- '19#.#75.125.195':80
- '%WINDIR%\syswow64\wscript.exe' "%ProgramFiles(x86)%\FastSok\Slon\isld.vbs"
- '%WINDIR%\syswow64\wscript.exe' "%ProgramFiles(x86)%\FastSok\Slon\do.vbs"
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\FastSok\Slon\straho.bat" " (со скрытым окном)