Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ert32.exe' = '%APPDATA%\SubFolderName\FileName.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Key Name' = '%APPDATA%\SubFolderName\FileName.exe'
- '%TEMP%\Installer.exe'
- '%APPDATA%\SubFolderName\FileName.exe'
- '%TEMP%\ert32.exe'
- '%TEMP%\asprate.exe'
- '%TEMP%\ipchanger.exe'
- ClassName: 'TibiaClient' WindowName: '(null)'
- %TEMP%\5.da_
- %TEMP%\4.da_
- %TEMP%\3.da_
- %TEMP%\6.da_
- %APPDATA%\tbi32.dll
- %APPDATA%\SubFolderName\FileName.exe
- %TEMP%\7.da_
- %TEMP%\2.da_
- %TEMP%\ert32.exe
- %TEMP%\asprate.exe
- %TEMP%\ipchanger.exe
- %TEMP%\tbi32.dll
- %TEMP%\1.da_
- %TEMP%\Installer.exe
- %TEMP%\8.da_
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'TibiaClientPreview' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'