Техническая информация
- Диспетчера задач (Taskmgr)
- '<SYSTEM32>\cmd.exe' /c echo [zoneTransfer]ZoneID = 2 > "<Полный путь к файлу>":ZONE.identifier & exit
- [<HKCU>\Software\Valve\Steam]
- %TEMP%\CrashReports [23 September (12;30)].txt
- %TEMP%\AllPasswords.html
- %TEMP%\Information .txt
- %TEMP%\DotNetZip-j0a4pmjh.tmp
- %TEMP%\AllCookies.html
- %TEMP%\Ionic.Zip.dll
- <Полный путь к файлу>:ZONE.identifier
- %TEMP%\System.Data.SQLite.dll
- %TEMP%\DotNetZip-rxjczrcg.tmp
- %TEMP%\AllCookies.html
- %TEMP%\Information .txt
- %TEMP%\CrashReports [23 September (12;30)].txt
- %TEMP%\AllGrabbedTxtFilesFromDesktop [23 September (12;30)].zip
- %TEMP%\[Browser_Passwords] [23 September (12;30)].zip
- %TEMP%\AllPasswords.html
- %TEMP%\DotNetZip-j0a4pmjh.tmp в %TEMP%\[Browser_Passwords] [23 September (12;30)].zip
- %TEMP%\DotNetZip-rxjczrcg.tmp в %TEMP%\AllGrabbedTxtFilesFromDesktop [23 September (12;30)].zip
- 'hs####43jgs.hol.es':80
- '2i#.ru':80
- 'wp#d':80
- http://2i#.ru/
- http://11#.#11.111.1/wpad.dat via wp#d
- http://hs####43jgs.hol.es/
- DNS ASK hs####43jgs.hol.es
- DNS ASK 2i#.ru
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''