Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'PdfUpgrade' = '%WINDIR%\pop.exe'
- '<SYSTEM32>\reg.exe' add HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN /v PdfUpgrade /d %WINDIR%\pop.exe
- '%WINDIR%\explorer.exe' http://fa.###ipedia.org/wiki/%D9%86%D8%B8%D8%B1%DB%8C%D9%87_%D8%A7%D8%B9%D8%AF%D8%A7%D8%AF
- %WINDIR%\pop.exe
- 'fa.###ipedia.org':80
- 'localhost':1036
- fa.###ipedia.org/wiki/%D9%86%D8%B8%D8%B1%DB%8C%D9%87_%D8%A7%D8%B9%D8%AF%D8%A7%D8%AF
- DNS ASK fa.###ipedia.org
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''