Техническая информация
- '%TEMP%\upda.exe'
- '%TEMP%\PhotoDemon.exe'
- '%TEMP%\Chrome.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\updates[1].xml
- %TEMP%\Data\Presets\SafeShutdown.xml
- %TEMP%\3.tmp
- %TEMP%\upda.exe
- %TEMP%\Data\updates.xml
- %TEMP%\tmp.tmp
- %TEMP%\Chrome.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\Data\PhotoDemon_settings.xml
- %TEMP%\PhotoDemon.exe
- %TEMP%\upda.exe
- %TEMP%\Chrome.exe
- %TEMP%\Data\PhotoDemon_settings.xml
- %TEMP%\3.tmp
- %TEMP%\tmp.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- 'ph###demon.org':80
- 'localhost':1035
- ph###demon.org/downloads/freeimage.pdc
- ph###demon.org/downloads/pngnq-s9.pdc
- ph###demon.org/downloads/exiftool.pdc
- ph###demon.org/downloads/updates.xml
- ph###demon.org/downloads/zlibwapi.pdc
- ph###demon.org/downloads/eztw32.pdc
- DNS ASK www.ph###demon.org
- DNS ASK ph###demon.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'