Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C6519352-2226-00C3-0311-EC6896752F09}] 'StubPath' = ''
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C6519352-2226-00C3-0311-EC6896752F09}] 'StubPath' = '%WINDIR%\rename.exe'
- 'C:\XTCv25\xtc.exe'
- '<SYSTEM32>\Crack TLT.exe'
- '<SYSTEM32>\winlogin.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- %WINDIR%\rename.exe
- %HOMEPATH%\Desktop\XTC Auto Boom.lnk
- C:\XTCv25\xtc.exe
- <SYSTEM32>\Crack TLT.exe
- %TEMP%\aut1.tmp
- <SYSTEM32>\winlogin.exe
- %TEMP%\aut2.tmp
- %WINDIR%\rename.exe
- %HOMEPATH%\Desktop\XTC Auto Boom.lnk
- <SYSTEM32>\winlogin.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- 'lo#####eno1qb.zapto.org':3460
- DNS ASK lo#####eno1qb.zapto.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'