Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{92793l6i-8AJj-78l5-0S8S-j8K5H45o7S7Q}] 'stubpath' = '%APPDATA%\Microsoft\Windows Firewall\WIN32.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Adobe Drivers' = 'C:\Documents and Settings\de baas\Application Data\Microsoft\Local\uac.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adobe Drivers' = 'C:\Documents and Settings\de baas\Application Data\Microsoft\Local\uac.exe'
- %HOMEPATH%\Templates\dPUaetilDn.exe
- C:\Documents and Settings\de baas\Application Data\Microsoft\Local\uac.exe
- %HOMEPATH%\Templates\Auth Generator.exe
- %HOMEPATH%\Templates\fROMOHIO Auth Gen.exe
- %APPDATA%\Microsoft\Windows Firewall\WIN32.exe
- %TEMP%\21CA6.dmp
- %TEMP%\Startup SImg.jpeg
- C:\Documents and Settings\de baas\Application Data\Microsoft\Local\uac.exe
- %HOMEPATH%\Templates\Auth Generator.exe
- %HOMEPATH%\Templates\dPUaetilDn.exe
- %TEMP%\dw.log
- %HOMEPATH%\Templates\fROMOHIO Auth Gen.exe
- C:\Documents and Settings\de baas\Application Data\Microsoft\Local\uac.exe
- %APPDATA%\Microsoft\Windows Firewall\WIN32.exe
- 'sm##.live.com':587
- DNS ASK sm##.live.com
- '<IP-адрес в локальной сети>':1036
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''