Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Eset Smart Sectury' = '<SYSTEM32>\service.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Sistem Geri Yukleme' = '%PROGRAM_FILES%\Windows Live\Messenger\Msn.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Live Messenger' = '%PROGRAM_FILES%\Windows Live\Messenger\Msn.exe'
- %TEMP%\aut3.tmp
- <SYSTEM32>\ESET.exe
- <SYSTEM32>\service.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp