Техническая информация
- '%APPDATA%\skype.exe'
- '<SYSTEM32>\rundll32.exe' shell32.dll,Control_RunDLL "%APPDATA%\skype.cpl",
- '<SYSTEM32>\cmd.exe' /c ""%APPDATA%\start.bat" "
- '<SYSTEM32>\rundll32.exe' shell32.dll,Control_RunDLL "%APPDATA%\start.cpl",
- %APPDATA%\skype.cpl
- %TEMP%\DefaultPackOffer.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\st[1].img
- %APPDATA%\skype.exe
- %APPDATA%\start.bat
- %APPDATA%\start.cpl
- %TEMP%\DefaultPackOffer.dll
- 'si#######90858.provisorio.ws':80
- si#######90858.provisorio.ws/images/st.img
- DNS ASK si#######90858.provisorio.ws
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'