Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wispsi' = '%APPDATA%\wispsi\wispsi.exe'
- %APPDATA%\wispsi\bootstrap.exe
- %WINDIR%\Explorer.EXE
- %TEMP%\dw.log
- %TEMP%\227C2.dmp
- %APPDATA%\wispsi\wispsi.dll
- %APPDATA%\wispsi\wispsi.exe
- %APPDATA%\wispsi\bootstrap.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''