Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsExplorer' = '%PROGRAM_FILES%\VExplorer\vexplorer.exe'
- '%PROGRAM_FILES%\VExplorer\vexplorer.exe'
- <SYSTEM32>\d3d9caps.dat
- <SYSTEM32>\d3d9caps.tmp
- %PROGRAM_FILES%\AdminTest.txt
- %PROGRAM_FILES%\VExplorer\vexplorer.exe
- <SYSTEM32>\d3d9caps.dat
- %PROGRAM_FILES%\AdminTest.txt
- <SYSTEM32>\d3d9caps.tmp в <SYSTEM32>\d3d9caps.dat
- 'bi####.bplaced.net':80
- 'ch####p.dyndns.org':80
- ch####p.dyndns.org/
- bi####.bplaced.net/programs/ProjectV/hackedcommand.php
- DNS ASK bi####.bplaced.net
- DNS ASK ch####p.dyndns.org
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'