Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'csrs.exe' = '%WINDIR%\csrs.exe'
- '%WINDIR%\ctfmoon1.exe'
- '%TEMP%\ctfmoon.exe'
- '%TEMP%\stp.exe' -pxsw
- ClassName: 'TibiaClient' WindowName: '(null)'
- %WINDIR%\csrs.exe
- %WINDIR%\ctfmoon1.exe
- %TEMP%\stp.exe
- %TEMP%\ctfmoon.exe
- '18#.#65.245.114':80
- 18#.#65.245.114/version.txt
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'