Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wrik' = '%CommonProgramFiles%\wrik\wrikm.exe'
- %CommonProgramFiles%\wrik\~GLH0007.TMP
- %CommonProgramFiles%\wrik\~GLH0005.TMP
- %CommonProgramFiles%\wrik\temp.000
- %CommonProgramFiles%\wrik\~GLH0009.TMP
- %CommonProgramFiles%\wrik\wrikd\~GLH000d.TMP
- %CommonProgramFiles%\wrik\wrikd\~GLH000c.TMP
- %CommonProgramFiles%\wrik\wrikd\~GLH000b.TMP
- %CommonProgramFiles%\wrik\~GLH0003.TMP
- %TEMP%\GLM3.tmp
- %TEMP%\GLK2.tmp
- %TEMP%\GLC1.tmp
- %TEMP%\GLG5.tmp
- <SYSTEM32>\temp.000
- <SYSTEM32>\~GLH0001.TMP
- %WINDIR%\wrik\~GLH0000.TMP
- %CommonProgramFiles%\wrik\~GLH0007.TMP
- %CommonProgramFiles%\wrik\~GLH0009.TMP
- %CommonProgramFiles%\wrik\~GLH0005.TMP
- <SYSTEM32>\~GLH0001.TMP
- %CommonProgramFiles%\wrik\~GLH0003.TMP
- '21#.#33.246.150':80
- 21#.#33.246.150/install/?ac######################################################
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''