Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Text optimazer' = '%WINDIR%\notepab.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\op[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\op[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\op[2].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\op[2].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\op[2].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\op[1].php
- %WINDIR%\notepab.exe
- %WINDIR%\alert.t
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\op[1].php
- %WINDIR%\alert.log
- %WINDIR%\alert.t
- 'ce##-a.com':80
- 'localhost':1037
- ce##-a.com/2x/op.php?xx##############
- DNS ASK ce##-a.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'