Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Help' = '%WINDIR%\HELP\Wizardnil.exe'
- %WINDIR%\Help\Wizardnil.exe
- %WINDIR%\Help\Wizard002.dll
- %TEMP%\FID1.tmp
- %WINDIR%\Help\Arq\ANX 88E6680F PAG 1 %USERNAME%.DAT
- %WINDIR%\Help\Wizardnil.exe
- %WINDIR%\Help\HelpCfg.CFG
- %WINDIR%\Help\Wizard001.dll
- %TEMP%\FID1.tmp
- 'sm##.##a.terra.com.br':25
- DNS ASK sm##.##a.terra.com.br
- ClassName: '' WindowName: 'Wizardnil'
- ClassName: '' WindowName: 'nilWizard'
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''