Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{3257F1FB-8847-49A7-ED5F-B2CDB42B603B}] 'stubpath' = '<SYSTEM32>\jams\jams.exe s'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{2E19EE4D-A48E-E6A2-0702-040202000605}] 'StubPath' = '%WINDIR%\flixe.exe'
- '%WINDIR%\explorer.exe'
- '%TEMP%\server.exe'
- '%TEMP%\ЗгЗСЗКнЙ ИФЮЙ гЭСжФЙ МПнП.exe'
- %WINDIR%\explorer.exe
- msnmsgr.exe
- %TEMP%\server.exe
- %APPDATA%\addon.dat
- <SYSTEM32>\jams\jams.exe
- %TEMP%\server.exe.nb5.tmp
- %TEMP%\ЗгЗСЗКнЙ ИФЮЙ гЭСжФЙ МПнП.exe.nb5.tmp
- %TEMP%\ЗгЗСЗКнЙ ИФЮЙ гЭСжФЙ МПнП.exe
- %WINDIR%\flixe.exe
- %APPDATA%\addon.dat
- <SYSTEM32>\jams\jams.exe
- %TEMP%\server.exe.nb5.tmp
- %TEMP%\ЗгЗСЗКнЙ ИФЮЙ гЭСжФЙ МПнП.exe.nb5.tmp
- 'jo####90.no-ip.biz':3460
- 'jo####0.no-ip.biz':3460
- DNS ASK jo####90.no-ip.biz
- DNS ASK jo####0.no-ip.biz