Техническая информация
- '%PROGRAM_FILES%\MailRuPass\MailRuPass.exe'
- '%PROGRAM_FILES%\MailRuPass\run.exe'
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\Jin\Jin\ispolzovanie.vbs"
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\Jin\Jin\kolichestvo.vbs"
- '<SYSTEM32>\cmd.exe' /c ""%PROGRAM_FILES%\Jin\Jin\vito.bat" "
- %ALLUSERSPROFILE%\Application Data\Temp\htm\images\fon.jpg
- %ALLUSERSPROFILE%\Application Data\Temp\htm\images\bramus\pol12k.gif
- %PROGRAM_FILES%\Jin\Jin\vito.bat
- %ALLUSERSPROFILE%\Application Data\Temp\htm\style.css
- %ALLUSERSPROFILE%\Application Data\Temp\htm\images\bramus\percentImage.png
- %ALLUSERSPROFILE%\Application Data\Temp\htm\images\bramus\percentImage.gif
- %ALLUSERSPROFILE%\Application Data\Temp\htm\images\bramus\percentImage_back3.png
- %ALLUSERSPROFILE%\Application Data\Temp\htm\images\bramus\percentImage_back.png
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %PROGRAM_FILES%\MailRuPass\MailRuPass.exe
- %PROGRAM_FILES%\MailRuPass\run.exe
- %PROGRAM_FILES%\Jin\Jin\kaktus.rostet
- %PROGRAM_FILES%\Jin\Jin\konoplya.oh
- %PROGRAM_FILES%\Jin\Jin\kolichestvo.vbs
- %PROGRAM_FILES%\Jin\Jin\ispolzovanie.vbs
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- '96.##.190.62':1212
- 'localhost':1036
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'