Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\IGBE] 'ImagePath' = '%ProgramFiles%\Hemu\Ntezt.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\IGBE] 'Start' = '00000002'
- '%TEMP%\g81\avi_mpg_splitter_setup.exe'
- %ProgramFiles%\Hemu\hamaos\qudose.dll
- %ProgramFiles%\Hemu\hamaos\pat.xml
- %CommonProgramFiles%\System\Ole DB\MSPat.xml
- %ProgramFiles%\Hemu\neases.exe
- %TEMP%\g81\setup.ini
- %TEMP%\g81\gTemp.dat
- %ProgramFiles%\Hemu\femnos.exe
- %TEMP%\g81\jTemp.dat
- %ProgramFiles%\Hemu\femnos.exe в %ProgramFiles%\Hemu\Ntezt.exe
- %ProgramFiles%\Hemu\neases.exe в %ProgramFiles%\Hemu\Viewd.exe
- %TEMP%\g81\gTemp.dat в %TEMP%\g81\avi_mpg_splitter_setup.exe
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''