Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{46P3R4U7-P63T-IYLJ-Q760-WJ8TVA448A01}] 'StubPath' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'System' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System' = ''
- '<SYSTEM32>\notepad.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\notepad.exe
- %APPDATA%\Microsoft\Windows\System.dat
- <SYSTEM32>\System\System.exe
- %APPDATA%\Microsoft\Windows\System.cfg
- %APPDATA%\Microsoft\Windows\System.dat
- <SYSTEM32>\System\System.exe
- %APPDATA%\Microsoft\Windows\System.cfg
- '3g##.dnsd.info':88
- 'ca####g.linkpc.net':88
- '3g##.22ip.net':88
- 'localhost':1036
- 'si######gle.serveftp.com':88
- DNS ASK 3g##.dnsd.info
- DNS ASK ca####g.linkpc.net
- DNS ASK si######gle.serveftp.com
- DNS ASK 3g##.22ip.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''