Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'nvwiz' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Crystal.exe' = ''
- %APPDATA%\Crystal.exe
- %ALLUSERSPROFILE%\nvwiz.exe
- %APPDATA%\System.dat
- %APPDATA%\Windows.dat
- %ALLUSERSPROFILE%\nvwiz.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\e-markettop[1]
- %APPDATA%\etc.dat
- %APPDATA%\DirectX.dat
- %APPDATA%\Crystal.exe
- <LS_APPDATA>\Launcher.exe
- <LS_APPDATA>\Crystal.exe
- <LS_APPDATA>\Codecs.exe
- %TEMP%\2761.bat
- <LS_APPDATA>\Setup.dat
- <LS_APPDATA>\nvwiz.exe
- %TEMP%\2761.bat
- 'www.e-###kettop.com':80
- 'localhost':1037
- www.e-###kettop.com/
- DNS ASK www.e-###kettop.com
- DNS ASK www.ya##o.com
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''