Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\.netbios] 'ImagePath' = '\*'
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\smss.exe
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\b48dadf8.sys
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\max++.00.x86
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\{76620BB4-6C08-49d2-AE35-480385646585}
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\rp.log
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\{7D718C60-B241-4bcc-97C5-88875550460C}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\ykeineaq
- <SYSTEM32>\config\ykeineaq.sav
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\{FF1D3D65-8EB9-4347-B8C5-C2EC822C6CC2}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\{B2E11362-D348-4411-A4B4-82673555A60B}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\{49B474EB-92D0-464f-B1DD-1F37AABF9D95}