Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{8655ON01-07I7-N7B8-6HWR-D0LJSRDJ14HU}] 'StubPath' = '<SYSTEM32>\install\svchost.exe Restart'
- '<SYSTEM32>\install\svchost.exe'
- '<SYSTEM32>\qLFNNVLVMEFPxlTZxunz2.exe'
- '<SYSTEM32>\qLFNNVLVMEFPxlTZxunz1.exe'
- %APPDATA%\%USERNAME%v1.18.0 - Trial versionlog.dat
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%8
- %TEMP%\%USERNAME%2.txt
- <SYSTEM32>\qLFNNVLVMEFPxlTZxunz1.exe
- <SYSTEM32>\qLFNNVLVMEFPxlTZxunz2.exe
- <SYSTEM32>\install\svchost.exe
- %APPDATA%\%USERNAME%v1.18.0 - Trial versionlog.dat
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%8
- %TEMP%\%USERNAME%2.txt
- 'ap#.#witter.com':80
- 'wp#d':80
- 'er####us1.no-ip.org':999
- ap#.#witter.com/1/users/show.xml?sc###################
- wp#d/wpad.dat
- DNS ASK ap#.#witter.com
- DNS ASK wp#d
- DNS ASK er####us1.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'