Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WHSP Agent' = '%WINDIR%\28463\WHSP.exe'
- '%WINDIR%\28463\WHSP.exe'
- '%TEMP%\Install.exe'
- '%ProgramFiles%\Windows Media Player\wmplayer.exe' /prefetch:6 /Open "%TEMP%\Inna&Play&Win - On & on www.mp####se.com.mp3"
- Библиотека-обработчик для всех процессов: %WINDIR%\28463\WHSP.006
- %WINDIR%\28463\key.bin
- %WINDIR%\28463\WHSP.exe
- %WINDIR%\28463\WHSP.007
- %WINDIR%\28463\WHSP.003
- %WINDIR%\28463\WHSP.004
- %WINDIR%\28463\AKV.exe
- %WINDIR%\28463\WHSP.006
- %TEMP%\Install.exe
- %TEMP%\Install.exe.nb5.tmp
- %TEMP%\Inna&Play&Win - On & on www.mp3alese.com.mp3
- %WINDIR%\28463\WHSP.001
- %TEMP%\@2.tmp
- %TEMP%\@1.tmp
- %TEMP%\Install.exe
- %TEMP%\@1.tmp
- %TEMP%\Install.exe.nb5.tmp
- %TEMP%\Inna&Play&Win - On & on www.mp3alese.com.mp3
- ClassName: '\MSITPro::EventQueue' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: '' WindowName: 'AKLMW'
- ClassName: 'Type32_Main_Window' WindowName: ''
- ClassName: 'ReBarWindow32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WMPlayerApp' WindowName: ''
- ClassName: 'WMP9DeskBand' WindowName: 'WMP9DeskBand'