Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'v4jhb11m8z26n4' = '%HOMEPATH%\v4jhb11m8z26n4\80883.vbs'
- '%HOMEPATH%\v4jhb11m8z26n4\operPDFviver.com' eLtqeuKb.WJE
- '%TEMP%\Faktura_Vat.2014-07-02_6954.pdf.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shell32.dll,OpenAs_RunDLL %TEMP%\f.pdf
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\v4jhb11m8z26n4\vgoZDGRqGwa.OHU
- %HOMEPATH%\v4jhb11m8z26n4\eLtqeuKb.WJE
- %HOMEPATH%\v4jhb11m8z26n4\80883.vbs
- %HOMEPATH%\v4jhb11m8z26n4\78344.cmd
- %TEMP%\f.pdf
- %TEMP%\Faktura_Vat.2014-07-02_6954.pdf.exe
- %HOMEPATH%\v4jhb11m8z26n4\operPDFviver.com
- %HOMEPATH%\v4jhb11m8z26n4\mtrfjwYnyB.EEK
- %HOMEPATH%\v4jhb11m8z26n4\vgoZDGRqGwa.OHU
- %HOMEPATH%\v4jhb11m8z26n4\80883.vbs
- %HOMEPATH%\v4jhb11m8z26n4\78344.cmd
- %HOMEPATH%\v4jhb11m8z26n4\mtrfjwYnyB.EEK
- %HOMEPATH%\v4jhb11m8z26n4\operPDFviver.com
- %HOMEPATH%\v4jhb11m8z26n4\eLtqeuKb.WJE
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'