Техническая информация
- '%PROGRAM_FILES%\ЂЈЃeњ6y3\CleanSystem.exe'
- '%PROGRAM_FILES%\ЂЈЃeњ6y3\CleanSystem.exe' (загружен из сети Интернет)
- '%WINDIR%\explorer.exe'
- %WINDIR%\Explorer.EXE
- %TEMP%\138234.bmp
- %TEMP%\updspapi.rar
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\updspapi[1].rar
- %ALLUSERSPROFILE%\Start Menu\іМРт\ёЅјю\ЗеАнА¬»ш.lnk
- %PROGRAM_FILES%\ЂЈЃeњ6y3\updspapi.dll
- %PROGRAM_FILES%\ЂЈЃeњ6y3\niudll.jpg
- <SYSTEM32>\rNNuXZ.pic
- %TEMP%\129515.bmp
- %TEMP%\129500.lz
- %TEMP%\spuninst.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\spuninst[1].rar
- %WINDIR%\vbcfg.ini
- %TEMP%\138234.bmp
- %TEMP%\129500.lz
- %TEMP%\129515.bmp
- %TEMP%\updspapi.rar в %PROGRAM_FILES%\ЂЈЃeњ6y3\update\updspapi.dll
- %TEMP%\spuninst.jpg в %PROGRAM_FILES%\ЂЈЃeњ6y3\CleanSystem.exe
- 'wo##.vicp.hk':80
- 'localhost':1036
- wo##.vicp.hk/updspapi.rar
- wo##.vicp.hk/spuninst.rar
- DNS ASK wo##.vicp.hk
- ClassName: 'OleMainThreadWndClass' WindowName: '(null)'
- ClassName: 'SystemTray_Main' WindowName: '(null)'
- ClassName: 'CSCHiddenWindow' WindowName: '(null)'
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Proxy Desktop' WindowName: '(null)'
- ClassName: 'BaseBar' WindowName: 'ChanApp'