Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y518A8SE-NB4B-J355-7DF8-6Q6456X2JI25}] 'StubPath' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HKCU' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HKLM' = ''
- ClassName: 'OLLYDBG' WindowName: ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\plugin[1].xtr
- %APPDATA%\Microsoft\Windows\((MutexA)).xtr
- %APPDATA%\Microsoft\Windows\((MutexA)).dat
- %APPDATA%\Microsoft\Windows\((MutexA)).cfg
- %WINDIR%\WinAdir\WinA.exe
- %APPDATA%\Microsoft\Windows\((MutexA)).dat
- %APPDATA%\Microsoft\Windows\((MutexA)).cfg
- 'www.we###rver.com':80
- 'localhost':1035
- www.we###rver.com/plugin.xtr
- DNS ASK www.we###rver.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''