Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '7osf98m8517a' = '%HOMEPATH%\7osf98m8517a\89129.vbs'
- '%HOMEPATH%\7osf98m8517a\swNvWyTxQZ.exe' RnJHqy.MFN
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\7osf98m8517a\89129.vbs
- %HOMEPATH%\7osf98m8517a\78622.cmd
- %TEMP%\33818.dmp
- %TEMP%\dw.log
- %HOMEPATH%\7osf98m8517a\swNvWyTxQZ.exe
- %HOMEPATH%\7osf98m8517a\oDfIBbJfMmrQ.PVG
- %HOMEPATH%\7osf98m8517a\ICdCnLS.BFJ
- %HOMEPATH%\7osf98m8517a\RnJHqy.MFN
- %HOMEPATH%\7osf98m8517a\ICdCnLS.BFJ
- %HOMEPATH%\7osf98m8517a\89129.vbs
- %HOMEPATH%\7osf98m8517a\78622.cmd
- %HOMEPATH%\7osf98m8517a\oDfIBbJfMmrQ.PVG
- %HOMEPATH%\7osf98m8517a\swNvWyTxQZ.exe
- %HOMEPATH%\7osf98m8517a\RnJHqy.MFN
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'