Техническая информация
- [<HKLM>\Software\Microsoft\Internet Account Manager]
- [<HKCU>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Software\Microsoft\Internet Account Manager\Accounts]
- [<HKCU>\Software\Microsoft\Internet Account Manager\Accounts]
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook]
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings]
- [<HKCU>\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts]
- [<HKLM>\Software\RIT\The Bat!\Users depot]
- [<HKCU>\Software\Microsoft\Windows Mail]
- [<HKCU>\Software\Microsoft\Windows Live Mail]
- [<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
- [<HKLM>\Software\RIT\The Bat!]
- [<HKCU>\Software\RIT\The Bat!\Users depot]
- [<HKCU>\Software\RIT\The Bat!]
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\Preferred
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\53515a50-0ffb-474e-b9b1-fe3ba99536b8
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\34fd7173302fbfa42e5941b90b7a3150_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\34fd7173302fbfa42e5941b90b7a3150_23ef5514-3059-436f-a4a7-4cefaab20eb1
- 'ba##n-nn.ru':80
- http://ba##n-nn.ru/api/
- DNS ASK ba##n-nn.ru