Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SharedAPPs' = '%WINDIR%\system\<Имя файла>.exe'
- '%WINDIR%\regedit.exe' /s %WINDIR%\MStoolsAppi2.reg
- %WINDIR%\system\<Имя файла>.exe
- %ProgramFiles%\Adobe\Reader 9.0\Reader2\AcroPDF2.dll
- %ProgramFiles%\Adobe\Reader 9.0\Reader2\oemflag.dat
- %WINDIR%\MStoolsAppi2.reg
- %ProgramFiles%\Adobe\Reader 9.0\Reader2\oemflag.dat
- %WINDIR%\MStoolsAppi2.reg
- %WINDIR%\MStoolsAppi2.reg
- %ProgramFiles%\Adobe\Reader 9.0\Reader2\oemflag.dat
- 'an#######unosilva2.globat.com':80
- 'localhost':1038
- http://an#######unosilva2.globat.com/AcroPDF2.js
- DNS ASK an#######unosilva2.globat.com
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Directx9c' WindowName: ''