Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '%PROGRAM_FILES%\t24yar4\t24yar4.exe' = '%PROGRAM_FILES%\t24yar4\t24yar4.exe'
- <SYSTEM32>\cmd.exe /c """%TEMP%\RarSFX0\vDB.bat"" "
- ClassName: 'TibiaClient' WindowName: ''
- %TEMP%\RarSFX0\vDB.bat
- %PROGRAM_FILES%\t24yar4\t24yar4.exe
- %TEMP%\vDB.exe
- %TEMP%\svchost.exe
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''