Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'RDReminder' = '%TEMP%\RarSFX0\RegCleanPro.exe -rem'
- '%TEMP%\RarSFX0\RegCleanPro.exe'
- %TEMP%\RarSFX0\TraditionalCn_rcp_zh-tw.ini
- %TEMP%\RarSFX0\turkish_rcp_tr.ini
- %TEMP%\RarSFX0\CleanSchedule.exe
- %TEMP%\RarSFX0\Swedish_rcp.ini
- %TEMP%\RarSFX0\Portuguese_rcp.ini
- %TEMP%\RarSFX0\russian_rcp_ru.ini
- %TEMP%\RarSFX0\Spanish_rcp.ini
- %TEMP%\RarSFX0\RCPUninstall.exe
- %TEMP%\RarSFX0\install_left_image.bmp
- %APPDATA%\Systweak\RegClean Pro\Version 6.1\log_01-27-2014.log
- %TEMP%\RarSFX0\xmllite.dll
- %TEMP%\RarSFX0\RegCleanPro.exe
- %TEMP%\RarSFX0\isxdl.dll
- %TEMP%\RarSFX0\RegCleanPro.dll
- %TEMP%\RarSFX0\eng_rcp.ini
- %TEMP%\RarSFX0\Finnish_rcp_fi.ini
- %TEMP%\RarSFX0\French_rcp.ini
- %TEMP%\RarSFX0\Dutch_rcp.ini
- %TEMP%\RarSFX0\What's new.txt
- %TEMP%\RarSFX0\Chinese_rcp.ini
- %TEMP%\RarSFX0\Danish_rcp.ini
- %TEMP%\RarSFX0\German_rcp.ini
- %TEMP%\RarSFX0\Norwegian_rcp.ini
- %TEMP%\RarSFX0\polish_rcp_pl.ini
- %TEMP%\RarSFX0\portugese_rcp_pt.ini
- %TEMP%\RarSFX0\korean_rcp_ko.ini
- %TEMP%\RarSFX0\greek_rcp_el.ini
- %TEMP%\RarSFX0\Italian_rcp.ini
- %TEMP%\RarSFX0\Japanese_rcp.ini
- '<IP-адрес в локальной сети>':80
- 'localhost':445
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'