Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ctfmn' = '%HOMEPATH%\Local Settings\imwmap.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\OUTLOOK.lnk
- '%HOMEPATH%\Local Settings\FileZip.exe'
- '%HOMEPATH%\Local Settings\TTest.exe'
- '%HOMEPATH%\Local Settings\imwmap.exe'
- %HOMEPATH%\Local Settings\FileZip.exe
- %HOMEPATH%\Local Settings\$20ss10ky33fft\.vem
- <SYSTEM32>\dhcpinit.dll
- %HOMEPATH%\Local Settings\imwmap.exe
- <Текущая директория>\b662edoc
- %HOMEPATH%\Local Settings\TTest.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'