Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{BF12AA36-64D9-4F26-8762-60BE559E256B}] 'StubPath' = '<SYSTEM32>:ps.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:ps.exe
- %TEMP%\ci0-temp\Phtt_all.set
- %TEMP%\ci0-temp\phtt_setup.bmp
- %TEMP%\ґтЧЦ»ъ.exe
- %TEMP%\~setup01.exe
- %TEMP%\gert0.dll
- %TEMP%\~setup01.exe
- 'ps.###nassite.org':1110
- DNS ASK ps.###nassite.org
- ClassName: 'Shell_TrayWnd' WindowName: ''