Техническая информация
- '<SYSTEM32>\wscript.exe' "%WINDIR%\12332.vbs" start
- %WINDIR%\ntldr\User Data\diary1.dat
- %WINDIR%\ntldr\User Data\preferences.xml
- %WINDIR%\ntldr\system32.exe
- %WINDIR%\ntldr\User Data\diary.dat
- %WINDIR%\sysdirset.bat
- %WINDIR%\vbsdir.vbs
- %WINDIR%\ntldr\wininit.vbs
- %WINDIR%\12332.vbs
- %WINDIR%\ntldr\123.bat
- %WINDIR%\ntldr\123.vbs
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %WINDIR%\ntldr\diary.exe
- %WINDIR%\ntldr\pshook.dll
- %WINDIR%\ntldr\Data\ps.dat
- %WINDIR%\ntldr\diary.dll
- %TEMP%\$inst\temp_0.tmp
- '94.##0.191.201':2525
- DNS ASK sm##.mail.ru
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'