Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '7y57ed5u' = '%HOMEPATH%\7y57ed5u\47541.vbs'
- '%HOMEPATH%\7y57ed5u\bFxMDQHp.com' GRhvr.WLU
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\7y57ed5u\tNVci.HKR
- %HOMEPATH%\7y57ed5u\81128.cmd
- %HOMEPATH%\7y57ed5u\47541.vbs
- %HOMEPATH%\7y57ed5u\MpOcZSBC.KED
- %HOMEPATH%\7y57ed5u\bFxMDQHp.com
- %HOMEPATH%\7y57ed5u\GRhvr.WLU
- %HOMEPATH%\7y57ed5u\tNVci.HKR
- %HOMEPATH%\7y57ed5u\47541.vbs
- %HOMEPATH%\7y57ed5u\81128.cmd
- %HOMEPATH%\7y57ed5u\MpOcZSBC.KED
- %HOMEPATH%\7y57ed5u\bFxMDQHp.com
- %HOMEPATH%\7y57ed5u\GRhvr.WLU
- 'ja####se-drama.net':3333
- DNS ASK ja####se-drama.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''