Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fu38367nv8861of' = '%HOMEPATH%\fu38367nv8861of\27550.vbs'
- '%HOMEPATH%\fu38367nv8861of\TbGJlsDjIPE.exe' lCpJdqKvc.CPE
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\fu38367nv8861of\biqaApPp.CYZ
- %HOMEPATH%\fu38367nv8861of\36438.cmd
- %HOMEPATH%\fu38367nv8861of\27550.vbs
- %HOMEPATH%\fu38367nv8861of\pFNf.UMD
- %HOMEPATH%\fu38367nv8861of\TbGJlsDjIPE.exe
- %HOMEPATH%\fu38367nv8861of\lCpJdqKvc.CPE
- %HOMEPATH%\fu38367nv8861of\biqaApPp.CYZ
- %HOMEPATH%\fu38367nv8861of\27550.vbs
- %HOMEPATH%\fu38367nv8861of\36438.cmd
- %HOMEPATH%\fu38367nv8861of\pFNf.UMD
- %HOMEPATH%\fu38367nv8861of\TbGJlsDjIPE.exe
- %HOMEPATH%\fu38367nv8861of\lCpJdqKvc.CPE
- 'ko####-drama.net':3333
- DNS ASK ko####-drama.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'