Техническая информация
- %PROGRAM_FILES%\ph_2\ph_2\pipipipi.exe
- %WINDIR%\regedit.exe -s snapshot.reg
- <SYSTEM32>\cmd.exe /c ""%PROGRAM_FILES%\ph_2\ph_2\olololo.bat" "
- %PROGRAM_FILES%\ph_2\ph_2\olololo.bat
- %PROGRAM_FILES%\ph_2\ph_2\p.txt
- %PROGRAM_FILES%\ph_2\ph_2\pipipipi.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- 'po###dota.ru':45612
- DNS ASK po###dota.ru
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''