Техническая информация
- [<HKLM>\SOFTWARE\Classes\.ghi\shell\open\command] '' = '%PROGRAM_FILES%\lvegned\sysinit.exe'
- %PROGRAM_FILES%\lvegned\scvhost.exe
- %PROGRAM_FILES%\lvegned\sstatic.exe
- %TEMP%\is-RD8DJ.tmp\is-H56I3.tmp /SL4 $40036 "<Полный путь к вирусу>" 81487 52224
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE Explorer\iexplore.exe http://12#.##4.9.120:8022/Insertbz.aspx?mc##############################
- %PROGRAM_FILES%\lvegned\is-GDJHQ.tmp
- %PROGRAM_FILES%\lvegned\is-J45UQ.tmp
- %PROGRAM_FILES%\lvegned\is-GFAO2.tmp
- %PROGRAM_FILES%\lvegned\unins000.dat
- %PROGRAM_FILES%\lvegned\is-346RI.tmp
- %PROGRAM_FILES%\lvegned\is-Q9QNF.tmp
- %TEMP%\is-JU5LD.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-RD8DJ.tmp\is-H56I3.tmp
- %TEMP%\is-JU5LD.tmp\_isetup\_shfoldr.dll
- %PROGRAM_FILES%\lvegned\is-2EAU8.tmp
- %PROGRAM_FILES%\lvegned\is-7QP7L.tmp
- %TEMP%\is-JU5LD.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-JU5LD.tmp\_isetup\_RegDLL.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''