Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 'FolderRedirection' = '{a98e840c-d876-4e1b-a473-86e165d703cf}'
- %TEMP%\ez-backup-ie-and-windows-mail-pro-6.14.exe
- <SYSTEM32>\regsvr32.exe /s %TEMP%\windll.dll
- %TEMP%\windll.dll
- %CommonProgramFiles%\Folder\FolderRedirection.dll
- %TEMP%\ez-backup-ie-and-windows-mail-pro-6.14.log
- %TEMP%\ez-backup-ie-and-windows-mail-pro-6.14.exe
- %TEMP%\nsa2.tmp\NSISdl.dll
- %TEMP%\nsa2.tmp\NSISdl.dll
- %TEMP%\windll.dll
- '20#.#26.167.92':80
- 20#.#26.167.92/tor2_5/trun.php?tn#######################################
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MozillaUIWindowClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''