Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WMIPPlus' = '"%PROGRAM_FILES%\wmipplus\wmiu.exe" -a'
- скрытых файлов
- '%PROGRAM_FILES%\wmipplus\wmiu.exe' -gv
- %PROGRAM_FILES%\wmipplus\wmipfm.exe
- %PROGRAM_FILES%\wmipplus\wmiu.exe
- %PROGRAM_FILES%\wmipplus\wmib.dll
- %PROGRAM_FILES%\wmipplus\setfile.zip
- %PROGRAM_FILES%\wmipplus\UnInstall.exe
- %PROGRAM_FILES%\wmipplus\setfile.zip
- 'ru####07.pnsweb.net':80
- ru####07.pnsweb.net/ls_install.asp?ma#########################
- DNS ASK ru####07.pnsweb.net
- ClassName: 'SHELLDLL_DefView' WindowName: ''
- ClassName: 'SysListView32' WindowName: 'FolderView'
- ClassName: 'WorkerW' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'