Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Tsl' = '%CommonProgramFiles%\tsa\tsl.exe'
- %CommonProgramFiles%\tsa\~GLH0000.TMP
- %CommonProgramFiles%\tsa\temp.000
- %TEMP%\GLM3.tmp
- %TEMP%\GLC1.tmp
- %TEMP%\GLK2.tmp
- %CommonProgramFiles%\tsa\~GLH0000.TMP
- %CommonProgramFiles%\tsa\~GLH0001.TMP в %CommonProgramFiles%\tsa\tsl.exe
- %CommonProgramFiles%\tsa\temp.000 в %CommonProgramFiles%\tsa\~GLH0001.TMP
- 'www.ta###tsaver.com':80
- www.ta###tsaver.com/install/?ac###############
- DNS ASK www.ta###tsaver.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'