Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fi68818E41485' = '%HOMEPATH%\sy10848F52551\svchost.exe'
- '%HOMEPATH%\sy10848F52551\svchost.exe'
- %HOMEPATH%\tc50233Z72793.txt
- %TEMP%\aut1.tmp
- %HOMEPATH%\mz14613N74351.EV2
- %HOMEPATH%\sy10848F52551\svchost.exe
- %HOMEPATH%\sy10848F52551\OL.IYW
- C:\svchost.exe
- %HOMEPATH%\mz14613N74351.EV2
- %HOMEPATH%\tc50233Z72793.txt
- %TEMP%\aut1.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''