Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Startup key' = '%TEMP%\subfolder1\Refrnsange.scr'
- Процесс fqnkng.exe, модуль ntdll.dll
- %TEMP%\nswe63b.tmp
- %TEMP%\focusses\seksualklinikken
- %TEMP%\focusses\frdigkonstruere.txt
- %TEMP%\focusses\neurocentral
- %TEMP%\focusses\mandaarene.ini
- %TEMP%\focusses\amygdale\skospndernes.ini
- %TEMP%\focusses\amygdale\unwarn.aad
- %TEMP%\tmaz.ini
- %TEMP%\nsvf02f.tmp\system.dll
- %APPDATA%\microsoft\windows\printer shortcuts\bowels.ini
- ClassName: '#32770' WindowName: ''