Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'CashBack' = '%PROGRAM_FILES%\CashBack\bin\cashback.exe'
- <SYSTEM32>\regsvr32.exe /s <SYSTEM32>\mscb.dll
- %PROGRAM_FILES%\CashBack\bin\flash.exe
- C:\temp\bb_click_wider.swf
- C:\temp\bb_auto_wider.swf
- %PROGRAM_FILES%\CashBack\logo.gif
- %PROGRAM_FILES%\CashBack\bin\cashback.exe
- %PROGRAM_FILES%\CashBack\bin\cb.exe
- C:\temp\bb_welcome.html
- C:\temp\logo.gif
- <SYSTEM32>\mscb.dll
- %PROGRAM_FILES%\CashBack\Uninstall.exe
- C:\temp\bb_welcome1.swf
- C:\temp\blank.gif
- C:\temp\icon.gif
- %PROGRAM_FILES%\CashBack\cb.exe
- %PROGRAM_FILES%\CashBack\flash.exe
- %PROGRAM_FILES%\CashBack\template.html
- %TEMP%\nsq2.tmp
- %PROGRAM_FILES%\CashBack\mscb.dll
- %PROGRAM_FILES%\CashBack\cashback.exe
- %PROGRAM_FILES%\CashBack\template2.html
- %PROGRAM_FILES%\CashBack\bb_welcome1.swf
- %PROGRAM_FILES%\CashBack\blank.gif
- %PROGRAM_FILES%\CashBack\icon.gif
- %PROGRAM_FILES%\CashBack\bb_click_wider.swf
- %PROGRAM_FILES%\CashBack\bb_auto_wider.swf
- %PROGRAM_FILES%\CashBack\bb_welcome.html
- %PROGRAM_FILES%\CashBack\cb.exe
- %PROGRAM_FILES%\CashBack\flash.exe
- %PROGRAM_FILES%\CashBack\mscb.dll
- %PROGRAM_FILES%\CashBack\cashback.exe
- ClassName: 'cashback_wnd_class' WindowName: 'cashback module'