Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '%PROGRAM_FILES%\Windows Group\1svnhost.exe, explorer.exe'
- '%PROGRAM_FILES%\Windows Group\1svnhost.exe'
- '%WINDIR%\regedit.exe' /s "%PROGRAM_FILES%\Microsoft\Regedit.reg"
- %PROGRAM_FILES%\Microsoft\Home.zip
- %PROGRAM_FILES%\Microsoft\Regedit.reg
- %PROGRAM_FILES%\Windows Group\1svnhost.exe
- 'fr######ownload.ucoz.net':80
- http://fr######ownload.ucoz.net/Host.zip
- DNS ASK fr######ownload.ucoz.net
- ClassName: '' WindowName: 'Remote Manipulator System - '
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''