Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ntfsstart' = '"%PROGRAM_FILES% (x86)\JCodec\start.exe"'
- %PROGRAM_FILES% (x86)\JCodec\miner.php
- %PROGRAM_FILES% (x86)\JCodec\ntfs.exe
- %PROGRAM_FILES% (x86)\JCodec\libusb-1.0.dll
- %PROGRAM_FILES% (x86)\JCodec\librtmp.dll
- %PROGRAM_FILES% (x86)\JCodec\libssh2.dll
- %PROGRAM_FILES% (x86)\JCodec\phatk121016.cl
- %PROGRAM_FILES% (x86)\JCodec\start.exe
- %PROGRAM_FILES% (x86)\JCodec\zlib1.dll
- %PROGRAM_FILES% (x86)\JCodec\ssleay32.dll
- %PROGRAM_FILES% (x86)\JCodec\poclbm121016.cl
- %PROGRAM_FILES% (x86)\JCodec\scrypt121016.cl
- %PROGRAM_FILES% (x86)\JCodec\libidn-11.dll
- %PROGRAM_FILES% (x86)\JCodec\API.java
- %PROGRAM_FILES% (x86)\JCodec\api-example.c
- %PROGRAM_FILES% (x86)\JCodec\API.class
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %PROGRAM_FILES% (x86)\JCodec\api-example.php
- %PROGRAM_FILES% (x86)\JCodec\libcurl.dll
- %PROGRAM_FILES% (x86)\JCodec\libeay32.dll
- %PROGRAM_FILES% (x86)\JCodec\example.conf
- %PROGRAM_FILES% (x86)\JCodec\diablo121016.cl
- %PROGRAM_FILES% (x86)\JCodec\diakgcn121016.cl
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''