Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'v4jhb11m8z26n4' = '%HOMEPATH%\v4jhb11m8z26n4\80883.vbs'
- '%HOMEPATH%\v4jhb11m8z26n4\operPDFviver.com' eLtqeuKb.WJE
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %HOMEPATH%\v4jhb11m8z26n4\vgoZDGRqGwa.OHU
- %HOMEPATH%\v4jhb11m8z26n4\78344.cmd
- %HOMEPATH%\v4jhb11m8z26n4\80883.vbs
- %HOMEPATH%\v4jhb11m8z26n4\mtrfjwYnyB.EEK
- %HOMEPATH%\v4jhb11m8z26n4\operPDFviver.com
- %HOMEPATH%\v4jhb11m8z26n4\eLtqeuKb.WJE
- %HOMEPATH%\v4jhb11m8z26n4\vgoZDGRqGwa.OHU
- %HOMEPATH%\v4jhb11m8z26n4\80883.vbs
- %HOMEPATH%\v4jhb11m8z26n4\78344.cmd
- %HOMEPATH%\v4jhb11m8z26n4\mtrfjwYnyB.EEK
- %HOMEPATH%\v4jhb11m8z26n4\operPDFviver.com
- %HOMEPATH%\v4jhb11m8z26n4\eLtqeuKb.WJE
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'