Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Winhlp32' = '%HOMEPATH%\My Documents\CommonData\Winhlp32.exe'
- '%WINDIR%\explorer.exe'
- %WINDIR%\explorer.exe
- opera.exe
- skype.exe
- iexplore.exe
- chrome.exe
- firefox.exe
- %HOMEPATH%\My Documents\CommonData\Winhlp32.exe
- %HOMEPATH%\busy
- DNS ASK go###eads.com
- ClassName: 'Indicator' WindowName: '(null)'