Техническая информация
- [<HKLM>\SOFTWARE\Classes\117FIle\shell\open\command] '' = '%PROGRAM_FILES%\NetMeeting\system.exe'
- расширений файлов
- '%PROGRAM_FILES%\Messenger\SVCH0ST.EXE'
- '%TEMP%\RarSFX0\BigFoot.exe'
- '%TEMP%\RarSFX0\BigFoot3.2.2.exe'
- '%PROGRAM_FILES%\NetMeeting\system.exe'
- Библиотека-обработчик для всех процессов: %PROGRAM_FILES%\NetMeeting\nmasu.dll
- %PROGRAM_FILES%\Messenger\SVCH0ST.EXE
- %PROGRAM_FILES%\NetMeeting\nmasu.dll
- %HOMEPATH%\Favorites\CFНв№ТПВФШ.url
- %CommonProgramFiles%\System\taobao.ico
- %TEMP%\RarSFX0\BigFoot3.2.2.exe
- %TEMP%\RarSFX0\BigFoot.exe
- %PROGRAM_FILES%\NetMeeting\system.exe
- %CommonProgramFiles%\System\Default64.SFX
- %CommonProgramFiles%\System\Default64.SFX
- 'bf####tedx.178.com':80
- 'bf####tewt.178.com':80
- DNS ASK bf####tedx.178.com
- DNS ASK bf####tewt.178.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'