Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'UpData' = '"%TEMP%\svschosth.exe" -hide'
- %TEMP%\svschosth.exe
- %TEMP%\p2.exe
- %TEMP%\RarSFX0\Foto.exe
- %TEMP%\RarSFX0\Fotos.com
- %TEMP%\p1.jpg
- %TEMP%\p2.exe
- %TEMP%\svschosth.exe
- %TEMP%\RarSFX0\Foto.exe
- %TEMP%\RarSFX0\Fotos.com
- %TEMP%\RarSFX0\Fotos.com
- %TEMP%\RarSFX0\Foto.exe
- 'ko#####7.evangelion.nu':9222
- DNS ASK ko#####7.evangelion.nu
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''