Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Offlsys' = '<SYSTEM32>\Offlsys.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Offlsys' = '<SYSTEM32>\Offlsys.exe'
- <SYSTEM32>\Offlsys.exe -i
- <SYSTEM32>\Offlsys.exe
- %TEMP%\install.par
- %TEMP%\Offlsys.ini
- <SYSTEM32>\Offlsys.ini
- <SYSTEM32>\offlsys.tmp
- <SYSTEM32>\zlib.dll
- <SYSTEM32>\MSWINSCK.OCX
- %TEMP%\Mon.exe
- %TEMP%\ASYCFILT.DLL
- %TEMP%\OLEPRO32.DLL
- %TEMP%\MSVBVM50.DLL
- %TEMP%\COMCAT.DLL
- %TEMP%\INSTALL.EXE
- %TEMP%\STDOLE2.TLB
- %TEMP%\MSWINSCK.OCX
- %TEMP%\INSTALL.EXE
- %TEMP%\STDOLE2.TLB
- %TEMP%\Mon.exe
- %TEMP%\install.par
- %TEMP%\Offlsys.ini
- %TEMP%\OLEPRO32.DLL
- %TEMP%\MSVBVM50.DLL
- %TEMP%\ASYCFILT.DLL
- %TEMP%\MSWINSCK.OCX
- %TEMP%\COMCAT.DLL
- 'be######5a3a2af.localdomain':303
- DNS ASK BE######5A3A2AF.localdomain
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Indicator' WindowName: ''