Техническая информация
- [<HKCU>\Software\Microsoft\Internet Explorer\Extensions\{000000A3-57A6-49EA-B96B-1428070E5924}] 'Exec' = 'http://click.linkprice.com/click.php?m=11st&l=0000&a=A100521589'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'pv_inc' = '%APPDATA%\Roaming\Microsoft\sofa\upvinc.exe'
- [<HKCU>\Software\Microsoft\Internet Explorer\Extensions\{000000A1-CA93-46BB-9D4A-DBD498CB8944}] 'Exec' = 'http://click.linkprice.com/click.php?m=gmarket&l=0000&a=A100521589'
- [<HKCU>\Software\Microsoft\Internet Explorer\Extensions\{000000A2-F93E-4C0B-87D5-490AEF45ADD3}] 'Exec' = 'http://click.linkprice.com/click.php?m=auction&l=0000&a=A100521589'
- %HOMEPATH%\Favorites\11№ш°Ў АМµї.URL
- %HOMEPATH%\Favorites\їБјЗ АМµї.URL
- %HOMEPATH%\Favorites\Gё¶ДП АМµї.URL
- DNS ASK up####.popupvaccine.com
- DNS ASK dn#.##ftncsi.com
- DNS ASK co#####.popupvaccine.com
- ClassName: 'Shell_TrayWnd' WindowName: ''