Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '4v2867kp65zh7a' = '%HOMEPATH%\4v2867kp65zh7a\90123.vbs'
- скрытых файлов
- Компонент восстановления системы (SR)
- '%HOMEPATH%\4v2867kp65zh7a\tester.exe'
- '%HOMEPATH%\4v2867kp65zh7a\VSsQTX.exe' PbMOeVzHrU.TDN
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %HOMEPATH%\4v2867kp65zh7a\tester.exe
- %HOMEPATH%\4v2867kp65zh7a\77873.cmd
- %HOMEPATH%\4v2867kp65zh7a\90123.vbs
- %HOMEPATH%\4v2867kp65zh7a\gNeOZfA.AWM
- %HOMEPATH%\4v2867kp65zh7a\uVQw.ZPD
- %HOMEPATH%\4v2867kp65zh7a\VSsQTX.exe
- %HOMEPATH%\4v2867kp65zh7a\PbMOeVzHrU.TDN
- %HOMEPATH%\4v2867kp65zh7a\gNeOZfA.AWM
- %HOMEPATH%\4v2867kp65zh7a\90123.vbs
- %HOMEPATH%\4v2867kp65zh7a\77873.cmd
- %HOMEPATH%\4v2867kp65zh7a\uVQw.ZPD
- %HOMEPATH%\4v2867kp65zh7a\VSsQTX.exe
- %HOMEPATH%\4v2867kp65zh7a\PbMOeVzHrU.TDN
- '52####rry.no-ip.org':1604
- DNS ASK 52####rry.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'