Техническая информация
- [<HKLM>\SOFTWARE\Classes\VBSFile\Shell\Open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\WSFFile\Shell\Open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\VBEFile\Shell\Open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\JSFile\Shell\Open\Command] '' = ''
- [<HKLM>\SOFTWARE\Classes\JSEFile\Shell\Open\Command] '' = ''
- 'C:\navupdate\cscript.exe' date.vbs
- 'C:\navupdate\cscript.exe' //H:WSCRIPT //S
- 'C:\navupdate\Kill.exe' execron.exe
- C:\navupdate\~GLH0005.TMP
- %TEMP%\~GLH0004.TMP
- C:\navupdate\~GLBS383.TMP
- C:\navupdate\~GLH0006.TMP
- C:\navupdate\Date.tmp
- C:\navupdate\~GLH0008.TMP
- C:\navupdate\~GLH0007.TMP
- C:\navupdate\wiseupdt_ran.tmp
- %TEMP%\GLG4.tmp
- %TEMP%\GLM2.tmp
- %TEMP%\GLC1.tmp
- %TEMP%\~GLH0000.TMP
- C:\~GLHTTP1.TMP
- C:\navupdate\~GLH0002.TMP
- %TEMP%\~GLH0001.TMP
- C:\navupdate\HitList.tmp
- C:\~GLHTTP1.TMP
- C:\navupdate\~GLH0006.TMP в C:\navupdate\nav_update.ini
- C:\navupdate\~GLH0005.TMP в C:\navupdate\SavPluginUtil.exe
- C:\navupdate\~GLH0008.TMP в C:\navupdate\cscript.exe
- C:\navupdate\~GLH0007.TMP в C:\navupdate\date.vbs
- %TEMP%\~GLH0004.TMP в %TEMP%\Kill.exe
- %TEMP%\~GLH0001.TMP в %TEMP%\GLF6.tmp
- %TEMP%\~GLH0000.TMP в %TEMP%\GLF5.tmp
- C:\navupdate\~GLBS383.TMP в C:\navupdate\HitList.tmp
- C:\navupdate\~GLH0002.TMP в C:\navupdate\Kill.exe
- 'na##.qwest.net':80
- na##.qwest.net/nav75/hi_speed/nav_update.ini
- DNS ASK na##.qwest.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'