Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{0FE2703F-7C86-42BD-8B03-B43C481AD738}' = ''
- %PROGRAM_FILES%\Internet Explorer\BoboChen.jsp
- %PROGRAM_FILES%\Internet Explorer\JavaNe64.Bet
- %PROGRAM_FILES%\Internet Explorer\JavaNe64.Bet
- ClassName: 'EXenaoRwClass' WindowName: 'EXsinxTwTitle'
- ClassName: 'Button' WindowName: 'Jsxtxut'
- ClassName: 'Button' WindowName: 'Js5zuty'
- ClassName: '' WindowName: 'Jsxtxut'
- ClassName: '' WindowName: 'Js5zuty'