Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rundll32' = '%APPDATA%\TaskOne\rundll32.exe'
- '%TEMP%\Pornogames\Fuck history teacher.exe'
- %APPDATA%\TaskOne\Userrp.gc
- %APPDATA%\TaskOne\Usersr.gc
- %TEMP%\Pornogames\Fuck history teacher.swf
- %APPDATA%\TaskOne\rundll32.exe
- %TEMP%\Pornogames\Fuck history teacher.exe
- %TEMP%\Pornogames\AxInterop.ShockwaveFlashObjects.dll
- %TEMP%\Pornogames\Interop.ShockwaveFlashObjects.dll
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''