Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'windos' = '%TEMP%\windos\svost.exe'
- '%TEMP%\is-RLIFO.tmp\TibiaTunnel733.tmp' /SL5="$200F6,7019150,422400,%TEMP%\windos\TibiaTunnel733.exe"
- '%TEMP%\windos\TibiaTunnel733.exe'
- '%TEMP%\windos\svost.exe'
- %TEMP%\is-BVOCD.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-BVOCD.tmp\isxdl.dll
- %TEMP%\is-RLIFO.tmp\TibiaTunnel733.tmp
- %TEMP%\windos\TibiaTunnel733.exe
- %TEMP%\windos\svost.exe
- 'ti####reminder.pl':80
- ti####reminder.pl/setup.ini
- DNS ASK ti####reminder.pl
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''