Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WINCHAT' = '%APPDATA%\Help\WINCHAT.EXE'
- %APPDATA%\Help\WINCHAT.EXE
- %WINDIR%\regedit.exe /s "%TEMP%\kb71271.log"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\AWS11743[1].jsp
- %TEMP%\~$workp.doc
- %TEMP%\kb71271.log
- <Текущая директория>\ka4281x3.log
- %APPDATA%\Help\WINCHAT.EXE
- %APPDATA%\Help\WINCHAT.EXE
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\AWS11743[1].jsp
- %TEMP%\kb71271.log
- <Текущая директория>\ka4281x3.log
- '61.##.12.164':80
- 61.##.12.164/AWS11743.jsp?Tp##################################################
- ClassName: 'WordPadClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Indicator' WindowName: ''