Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{5460C4DF-B266-909E-CB58-E32B79832EB2}] 'StubPath' = '%APPDATA%\MicrosoftDir\microsoft.exe restart'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HKCU' = '%APPDATA%\MicrosoftDir\microsoft.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HKLM' = '%APPDATA%\MicrosoftDir\microsoft.exe'
- '%APPDATA%\MicrosoftDir\microsoft.exe'
- '%TEMP%\microsoft2.exe'
- '%TEMP%\microsoft.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- %APPDATA%\Microsoft\Windows\((Mutex)).cfg
- %APPDATA%\MicrosoftDir\microsoft.exe
- %TEMP%\KJZd.gX
- %TEMP%\microsoft.exe
- %TEMP%\microsoft2.exe
- %APPDATA%\Microsoft\Windows\((Mutex)).cfg
- %APPDATA%\Microsoft\Windows\((Mutex)).cfg
- %APPDATA%\Microsoft\Windows\((Mutex)).cfg
- 'su####olm.myftp.org':2001
- 'su####olm.webhop.me':2002
- 'localhost':93
- 'localhost':1038
- 'su####olm.ddns.net':2000
- 'su####olm.ddns.net':92
- DNS ASK su####olm.webhop.me
- DNS ASK su####olm.myftp.org
- DNS ASK su####olm.ddns.net
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''