Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] 'TaskManger' = '%WINDIR%\TskMgr.exe'
- '%WINDIR%\regedit.exe' /s %WINDIR%\SYSTEM\Ghost.reg
- %WINDIR%\Temp\MailAttch\PopupRemover.exe
- %WINDIR%\Temp\MailAttch\SerialCracker.exe
- %WINDIR%\Temp\MailAttch\PasswordCracker.exe
- %WINDIR%\Temp\MailAttch\PopupKiller.exe
- %WINDIR%\Temp\MailAttch\Setup.exe
- %WINDIR%\Temp\MailAttch\WinZIP (Limited Edition).exe
- %WINDIR%\Temp\MailAttch\YahooMsg2004.exe
- %WINDIR%\Temp\MailAttch\TrendMicro2004 (With Serialcode).exe
- %WINDIR%\Temp\MailAttch\WinRAR (Limited Edition).exe
- %WINDIR%\system\Ghost.reg
- %WINDIR%\Temp\MailAttch\Excel2004.exe
- %WINDIR%\TskMgr.exe
- %WINDIR%\Temp\MailAttch\F-Secure2004 (With Serialcode).exe
- %WINDIR%\Temp\MailAttch\Msn7 (Latest Edition).exe
- %WINDIR%\Temp\MailAttch\Norton2004 (With Serialcode).exe
- %WINDIR%\Temp\MailAttch\Icq2004.exe
- %WINDIR%\Temp\MailAttch\McAfee2004 (With Serialcode).exe
- %WINDIR%\system\Ghost.reg
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'