Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'clover' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'clover_u' = '%PROGRAM_FILES%\forusplus CP\cdater.exe'
- %WINDIR%\CloverPlus.cot
- %PROGRAM_FILES%\forusplus CP\forusplus_uninstall.exe
- 'm.####ngicon.net':80
- m.####ngicon.net/files.php?cl##########
- DNS ASK m.####ngicon.net
- ClassName: 'Indicator' WindowName: '(null)'