Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\SecurityProviders] 'SecurityProviders' = 'msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, credssp.dll'
- [<HKLM>\SYSTEM\ControlSet001\Control\Lsa] 'Security Packages' = ''
- Средство контроля пользовательских учетных записей (UAC)
- '%HOMEPATH%\RDP6\ConnectionClient.exe' -server 62.141.36.130 -user Demo -domain statusx -color 16 -alttab 0 -printer on -com off -smartcard off -preview on -remoteapp off -seamless on -wallp green -disk on -smartsizing 0 -apppath C:\Business10\Bin\Business.exe -localtb 32
- %TEMP%\aut8.tmp
- %HOMEPATH%\RDP6\bkgscblue.bmp
- %HOMEPATH%\RDP6\bkgsc.bmp
- %HOMEPATH%\RDP6\ico2.ico
- %TEMP%\aut7.tmp
- %TEMP%\aut9.tmp
- %TEMP%\autB.tmp
- %HOMEPATH%\RDP6\TsCredentials.exe
- %HOMEPATH%\RDP6\bkgscpink.bmp
- %HOMEPATH%\RDP6\bkgscgreen.bmp
- %TEMP%\autA.tmp
- %HOMEPATH%\RDP6\mstsc.exe
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- %HOMEPATH%\RDP6\mstscax.dll
- %HOMEPATH%\RDP6\<Имя вируса>.txt
- %HOMEPATH%\RDP6\languk.ini
- %TEMP%\aut6.tmp
- %TEMP%\aut5.tmp
- %TEMP%\aut4.tmp
- %HOMEPATH%\RDP6\ConnectionClient.exe
- %TEMP%\aut9.tmp
- %TEMP%\aut8.tmp
- %TEMP%\aut7.tmp
- %HOMEPATH%\RDP6\bkgsc.bmp
- %TEMP%\autB.tmp
- %TEMP%\autA.tmp
- %TEMP%\aut6.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- <SYSTEM32>\PerfStringBackup.TMP
- %TEMP%\aut5.tmp
- %TEMP%\aut4.tmp
- %TEMP%\aut3.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'