Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ImagePath' = '"%CommonProgramFiles%\System\69\svchost.exe" /AUTO'
- '%TEMP%\C\thir.exe'
- '%WINDIR%\regedit.exe' "%TEMP%\C\elf.reg"
- ClassName: 'TibiaClient' WindowName: '(null)'
- %CommonProgramFiles%\System\69\svchost.exe
- %TEMP%\C\elf.reg
- %TEMP%\C\thir.exe
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'