Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Winexp.lnk
- '%TEMP%\AI1.tmp\~0000.exe' %APPDATA%\PrivateFolder.1.1.70.cfg
- '<SYSTEM32>\cmd.exe' /c copy "%TEMP%\RarSFX0\*.*" "%APPDATA%\Win" & exit
- '%TEMP%\RarSFX0\Winexp.exe'
- '%APPDATA%\PrivateFolder.1.1.70.exe'
- %TEMP%\AI1.tmp\dosshell.pif
- %TEMP%\AICOMPRESSOR.DLL
- %TEMP%\AI1.tmp\~0000.shr
- %TEMP%\AI1.tmp\~0000.exe
- %APPDATA%\Win\Resvxamvenagxehdo.xml
- %APPDATA%\Win\Winexp.exe
- %TEMP%\temporary.aic
- %APPDATA%\Win\Jjkiicchmbulmig.dat
- %TEMP%\RarSFX0\Jjkiicchmbulmig.dat
- %APPDATA%\PrivateFolder.1.1.70.exe
- %TEMP%\RarSFX0\Winexp.exe
- %TEMP%\RarSFX0\Resvxamvenagxehdo.xml
- %TEMP%\AI1.tmp\dialog.bmp
- %TEMP%\AI1.tmp\EULA-Freeware.txt
- %TEMP%\AI1.tmp\~0000.bat
- %TEMP%\AI1.tmp\temp.shr
- %TEMP%\temporary.aic
- %TEMP%\AI1.tmp\~0000.shr
- %TEMP%\AI1.tmp\temp.shr
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''