Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '%HOMEPATH%\i34ht52ekp5' = '%HOMEPATH%\i34ht52ekp5\enriwau.vbs'
- '%HOMEPATH%\i34ht52ekp5\xqzpawp.exe' spbtotuc
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\i34ht52ekp5\slggbavjvn.cmd
- %HOMEPATH%\i34ht52ekp5\enriwau.vbs
- %HOMEPATH%\i34ht52ekp5\run.vbs
- %HOMEPATH%\i34ht52ekp5\ykbras.MFP
- %HOMEPATH%\i34ht52ekp5\odglejlsq.CCE
- %HOMEPATH%\i34ht52ekp5\xqzpawp.exe
- %HOMEPATH%\i34ht52ekp5\spbtotuc
- %HOMEPATH%\i34ht52ekp5\slggbavjvn.cmd
- %HOMEPATH%\i34ht52ekp5\enriwau.vbs
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''