Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsHost' = '%APPDATA%\WindowsHost\conhost.exe'
- '%APPDATA%\WindowsHost\conhost.exe'
- '%TEMP%\conhost.exe'
- %TEMP%\bassmod.dll
- %TEMP%\SWF!T_v02.TTF
- %APPDATA%\WindowsHost\.Identifier
- %TEMP%\conhost.exe
- %APPDATA%\WindowsHost\conhost.exe
- %TEMP%\dup2patcher.dll
- %APPDATA%\WindowsHost\.Identifier
- %APPDATA%\WindowsHost\conhost.exe
- '13#.#9.176.119':8772
- ClassName: 'Shell_TrayWnd' WindowName: ''