Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows] 'ImagePath' = '%WINDIR%\rejoice45.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows] 'Start' = '00000002'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE'
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\Delet.bat
- '%WINDIR%\rejoice45.exe'
- '<SYSTEM32>\calc.exe'
- <SYSTEM32>\calc.exe
- %WINDIR%\Delet.bat
- <SYSTEM32>\_rejoice45.exe
- %WINDIR%\rejoice45.exe
- <SYSTEM32>\_rejoice45.exe
- %WINDIR%\rejoice45.exe
- 'ic###r.vicp.cc':8181
- DNS ASK ic###r.vicp.cc
- ClassName: 'TRE20070711' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''