Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'expolrer' = '<SYSTEM32>:svchoss.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{582E7D42-B396-CF93-BE75-F3D2B9B4F94B}] 'StubPath' = '<SYSTEM32>:svchoss.exe'
- <SYSTEM32>\1st.exe
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- %PROGRAM_FILES%\Company\NewProduct\Uninstall.exe
- %PROGRAM_FILES%\Company\NewProduct\Uninstall.ini
- <SYSTEM32>:svchoss.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- <SYSTEM32>\1st.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- 'po####x.no-ip.biz':3460
- DNS ASK po####x.no-ip.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''