Техническая информация
- [<HKLM>\SOFTWARE\Classes\.ghi\shell\open\command] '' = '%PROGRAM_FILES%\lvegned\sysinit.exe'
- %PROGRAM_FILES%\lvegned\scvhost.exe
- %PROGRAM_FILES%\lvegned\sstatic.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://12#.##4.9.120:8022/Insertbz.aspx?mc##############################
- %PROGRAM_FILES%\lvegned\is-UPRE9.tmp
- %PROGRAM_FILES%\lvegned\is-VOIPA.tmp
- %PROGRAM_FILES%\lvegned\is-9H5UC.tmp
- %PROGRAM_FILES%\lvegned\unins000.dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\default[1].html
- %PROGRAM_FILES%\iedw.lnk
- %PROGRAM_FILES%\iedw.ghi
- %TEMP%\is-RLUGI.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-RLUGI.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-D99SH.tmp\is-HVDUQ.tmp
- %PROGRAM_FILES%\lvegned\is-NERO2.tmp
- %PROGRAM_FILES%\lvegned\is-PHDKE.tmp
- %PROGRAM_FILES%\lvegned\is-432QG.tmp
- %PROGRAM_FILES%\lvegned\is-JT6QO.tmp
- %TEMP%\is-D99SH.tmp\is-HVDUQ.tmp
- %TEMP%\is-RLUGI.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-RLUGI.tmp\_isetup\_RegDLL.tmp
- 'localhost':1038
- '12#.#24.9.120':8022
- 'localhost':1036
- 'www.xi###i189.com':80
- www.xi###i189.com/new/dd22/default.html?fr#########
- DNS ASK www.xi###i189.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''