Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'M651Y296y' = '%HOMEPATH%\T973A882n\system.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\system.exe
- Диспетчера задач (Taskmgr)
- '%HOMEPATH%\T973A882n\system.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %TEMP%\aut1.tmp
- %HOMEPATH%\O379Y549f.IW4
- %HOMEPATH%\O517L781i.txt
- %HOMEPATH%\T973A882n\system.exe
- %HOMEPATH%\T973A882n\CR.UOZ
- %HOMEPATH%\O379Y549f.IW4
- %HOMEPATH%\O517L781i.txt
- %HOMEPATH%\O379Y549f.IW4
- %TEMP%\aut1.tmp
- 'do#.#o-ip.org':3066
- DNS ASK do#.#o-ip.org
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'