Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '7fqgl94' = '%HOMEPATH%\7fqgl94\92419.vbs'
- '%HOMEPATH%\7fqgl94\kRCTYfNuDmUc.exe' aNaZVXibxc.SNG
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\7fqgl94\uAVLaZTD.IIG
- %HOMEPATH%\7fqgl94\29859.cmd
- %HOMEPATH%\7fqgl94\92419.vbs
- %HOMEPATH%\7fqgl94\MbzAEq.SVT
- %HOMEPATH%\7fqgl94\kRCTYfNuDmUc.exe
- %HOMEPATH%\7fqgl94\aNaZVXibxc.SNG
- %HOMEPATH%\7fqgl94\uAVLaZTD.IIG
- %HOMEPATH%\7fqgl94\92419.vbs
- %HOMEPATH%\7fqgl94\29859.cmd
- %HOMEPATH%\7fqgl94\MbzAEq.SVT
- %HOMEPATH%\7fqgl94\kRCTYfNuDmUc.exe
- %HOMEPATH%\7fqgl94\aNaZVXibxc.SNG
- 'ko####-drama.net':3333
- DNS ASK ko####-drama.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'