Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft® Windows® Operating System' = '%HOMEPATH%\Templates\ASPNet.exe'
- %TEMP%\cres.exe
- %TEMP%\f.exe
- %TEMP%\MSBuild.exe
- %HOMEPATH%\Templates\ASPNet.exe
- %TEMP%\svchosts.exe
- %TEMP%\RedbotPro.exe
- %TEMP%\i.exe -pwr
- %TEMP%\is-3N00I.tmp\RedbotPro.tmp /SL5="$50036,762302,54272,%TEMP%\RedbotPro.exe"
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- ClassName: 'TibiaClient' WindowName: ''
- %TEMP%\cres.exe
- %TEMP%\f.exe
- %TEMP%\MSBuild.exe
- %HOMEPATH%\Templates\ASPNet.exe
- %APPDATA%\26a8e6df64a631be6bf17aac00120984\26a8e6df64a631be6bf17aac00120984.txt
- %TEMP%\is-AP22I.tmp\_isetup\_shfoldr.dll
- %TEMP%\svchosts.exe
- %TEMP%\RedbotPro.exe
- %TEMP%\is-3N00I.tmp\RedbotPro.tmp
- %TEMP%\i.exe
- %TEMP%\is-AP22I.tmp\_isetup\_RegDLL.tmp
- %HOMEPATH%\Templates\ASPNet.exe
- %TEMP%\MSBuild.exe
- ClassName: 'nvftray' WindowName: 'nvftray'
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''