Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCenter.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavTask.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Classes\HTTP\shell\open\command] '' = '"%PROGRAM_FILES%\InternetExplorer\iexplore.exe" -nohome'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360Safe.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVP.exe] 'Debugger' = 'ntsd -d'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Explorer' = '<DRIVERS>\suchost.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMon.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStub.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMonD.exe] 'Debugger' = 'ntsd -d'
- <Drive name for removable media>:\autorun.inf
- <Drive name for removable media>:\ЎЎЎЎЎЎ.exe
- hidden files
- <DRIVERS>\suchost.exe
- <SYSTEM32>\cmd.exe /c "%TEMP%\del74$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del38$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del35$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del41$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del63$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del61$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del59$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del40$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del85$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del88$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del8$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del37$$.bat"
- <SYSTEM32>\net1.exe share A$ /del /y
- <SYSTEM32>\cmd.exe /c "%TEMP%\del34$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\83$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del9$$.bat"
- <SYSTEM32>\net1.exe share Z$ /del /y
- <SYSTEM32>\cmd.exe /c "%TEMP%\del6$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del17$$.bat"
- <SYSTEM32>\cmd.exe /c "%TEMP%\del86$$.bat"
- <SYSTEM32>\net1.exe share admin$ /del /y
- <SYSTEM32>\cmd.exe /c "%TEMP%\del12$$.bat"
- AVP.EXE
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'Icon' = 'inetcpl.cpl#001313'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'Description' = 'This zone contains all Web sites you haven't placed in other zones'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'RecommendedLevel' = '00011000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'MinLevel' = '00011000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'DisplayName' = 'Internet'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] 'Flags' = '00000047'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] 'RecommendedLevel' = '00010000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1805' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] 'MinLevel' = '00012000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] 'Icon' = 'inetcpl.cpl#00004481'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] 'Flags' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] 'RecommendedLevel' = '00012000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] 'Description' = 'This zone contains Web sites that could potentially damage your computer or data.'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1805' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'Flags' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] 'DisplayName' = 'Restricted sites'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] 'MinLevel' = '00010000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '1805' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] 'Flags' = '00000021'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] 'DisplayName' = 'Local intranet'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] 'CurrentLevel' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] 'DisplayName' = 'My Computer'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] 'Icon' = 'explorer.exe#0100'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] 'Description' = 'Your computer'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] 'DisplayName' = 'Trusted sites'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] 'Icon' = 'inetcpl.cpl#00004480'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] 'Description' = 'This zone contains Web sites that you trust not to damage your computer or data.'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '1805' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] 'Icon' = 'shell32.dll#0018'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] 'Description' = 'This zone contains all Web sites that are on your organization's intranet.'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] 'RecommendedLevel' = '00010500'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] 'MinLevel' = '00010000'
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\feeds\Desk_top_.ini
- %TEMP%\del35$$.bat
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\Desk_top_.ini
- %TEMP%\del63$$.bat
- %TEMP%\del74$$.bat
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\communicator\Desk_top_.ini
- %TEMP%\del38$$.bat
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\preferences\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabview\Desk_top_.ini
- %TEMP%\del41$$.bat
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\Desk_top_.ini
- %TEMP%\del6$$.bat
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\Desk_top_.ini
- %TEMP%\del17$$.bat
- %TEMP%\del12$$.bat
- %TEMP%\del86$$.bat
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\alerts\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\autoconfig\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\cookie\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\sidebar\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser-region\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\Desk_top_.ini
- %TEMP%\del40$$.bat
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\dom\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\layout\Desk_top_.ini
- %TEMP%\del85$$.bat
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\Desk_top_.ini
- %TEMP%\del59$$.bat
- %TEMP%\del8$$.bat
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\Desk_top_.ini
- %TEMP%\del61$$.bat
- %PROGRAM_FILES%\FireFox\chrome\en-US\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\preferences\Desk_top_.ini
- %TEMP%\del88$$.bat
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\safebrowsing\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\migration\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\places\Desk_top_.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\1[1].htm
- C:\Far\Addons\Macros\Desk_top_.ini
- %TEMP%\del9$$.bat
- C:\Far\Addons\SetUp\Desk_top_.ini
- C:\Far\Addons\Colors\Desk_top_.ini
- C:\Far\Addons\Colors\Custom Highlighting\Desk_top_.ini
- C:\Far\Addons\Colors\Default Highlighting\Desk_top_.ini
- %TEMP%\del37$$.bat
- C:\Far\Addons\Tables\Desk_top_.ini
- C:\autorun.inf
- %TEMP%\del34$$.bat
- C:\Far\Addons\Shell\Desk_top_.ini
- C:\ЎЎЎЎЎЎ.exe
- C:\Far\Addons\Archivers\Desk_top_.ini
- C:\go.sys
- <Current directory>\Desk_top_.ini
- %TEMP%\RGI1.tmp
- <Current directory>\Brood.exe.exe
- %TEMP%\83$$.bat
- <DRIVERS>\suchost.exe
- %TEMP%\RGI4.tmp
- C:\Far\Desk_top_.ini
- C:\Far\Addons\Desk_top_.ini
- %TEMP%\56$$.Ico
- %TEMP%\RGI2.tmp
- %TEMP%\RGI3.tmp
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\history\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\preferences\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\safebrowsing\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\search\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\migration\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\pageinfo\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\Desk_top_.ini
- C:\Far\Addons\Tables\Hebrew\Desk_top_.ini
- C:\Far\Addons\Tables\Western European\Desk_top_.ini
- C:\Far\Addons\XLat\Desk_top_.ini
- C:\Far\Addons\Tables\Central European\Desk_top_.ini
- C:\Far\Addons\Tables\Cyrillic\Desk_top_.ini
- C:\Far\Addons\Tables\Cyrillic\E-Mail Double Conversion\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\Desk_top_.ini
- C:\Far\Addons\XLat\Russian\Desk_top_.ini
- <Auxiliary element>
- %PROGRAM_FILES%\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabview\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\communicator\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\preferences\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\safebrowsing\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\search\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\alerts\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\sidebar\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser-region\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\autoconfig\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\dom\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\layout\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\cookie\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\preferences\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\safebrowsing\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\migration\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\preferences\Desk_top_.ini
- C:\Far\Addons\Shell\Desk_top_.ini
- C:\Far\Addons\Tables\Desk_top_.ini
- <Drive name for removable media>:\ЎЎЎЎЎЎ.exe
- <Drive name for removable media>:\autorun.inf
- C:\ЎЎЎЎЎЎ.exe
- C:\Far\Addons\Tables\Cyrillic\Desk_top_.ini
- C:\Far\Addons\Tables\Cyrillic\E-Mail Double Conversion\Desk_top_.ini
- C:\autorun.inf
- C:\Far\Addons\Tables\Central European\Desk_top_.ini
- C:\Far\Addons\Desk_top_.ini
- C:\Far\Addons\Archivers\Desk_top_.ini
- <Current directory>\Desk_top_.ini
- C:\Far\Desk_top_.ini
- C:\Far\Addons\Colors\Desk_top_.ini
- C:\Far\Addons\Macros\Desk_top_.ini
- C:\Far\Addons\SetUp\Desk_top_.ini
- C:\Far\Addons\Colors\Custom Highlighting\Desk_top_.ini
- C:\Far\Addons\Colors\Default Highlighting\Desk_top_.ini
- C:\Far\Addons\Tables\Hebrew\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\pageinfo\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\places\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\history\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\migration\Desk_top_.ini
- C:\Far\Addons\XLat\Russian\Desk_top_.ini
- <Auxiliary element>
- C:\Far\Addons\Tables\Western European\Desk_top_.ini
- C:\Far\Addons\XLat\Desk_top_.ini
- %PROGRAM_FILES%\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\browser\content\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\Desk_top_.ini
- %PROGRAM_FILES%\FireFox\chrome\Desk_top_.ini
- %TEMP%\RGI3.tmp
- %TEMP%\RGI4.tmp
- <Drive name for removable media>:\autorun.inf
- %TEMP%\RGI2.tmp
- C:\go.sys
- %TEMP%\RGI1.tmp
- %TEMP%\56$$.Ico
- 'www.da###ng08.com':80
- 'localhost':1087
- '<Private IP address>':445
- '<Private IP address>':139
- www.da###ng08.com/1.htm
- www.da###ng08.com/down/down.txt
- DNS ASK www.da###ng08.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'msctls_statusbar32' WindowName: ''
- ClassName: 'Indicator' WindowName: ''