Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'TBSysTray' = '%PROGRAM_FILES%\UPDD\TBSystry.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Mouclass] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\TBUPDD] 'ImagePath' = '<DRIVERS>\TBUPDDWD.SYS'
- %TEMP%\tbtemp\TBMorph.exe install-[LANG].UMD Bundle={9569DF3D-3355-11D5-92A7-004005684455}
- %TEMP%\tbtemp\expand.exe -r %TEMP%\tbtemp\setup.cab -F:* %TEMP%\tbtemp
- %WINDIR%\regedit.exe /s %TEMP%\tbtemp\tbupdd.reg
- %TEMP%\tbtemp\installwiz.bmp
- %TEMP%\tbtemp\licence-de.txt
- %TEMP%\tbtemp\installUPDDMOV3.tpl
- %TEMP%\tbtemp\install-jp.umd
- %TEMP%\tbtemp\installsys.bmp
- %TEMP%\tbtemp\licence-en.txt
- %TEMP%\tbtemp\General-jp.utl
- %TEMP%\tbtemp\inst16.exe
- %TEMP%\tbtemp\general-it.utl
- %TEMP%\tbtemp\licence-fr.txt
- %TEMP%\tbtemp\licence-jp.txt
- %TEMP%\tbtemp\install-en.umd
- %TEMP%\tbtemp\cabinet.dll__xxtmp
- %TEMP%\tbtemp\msvcrt.dll
- %TEMP%\tbtemp\cabinet.dll
- %TEMP%\tbtemp\expand.exe
- %TEMP%\tbtemp\expand.exe__xxtmp
- %TEMP%\tbtemp\msvcrt.dll__xxtmp
- %TEMP%\tbtemp\TBMorph.exe
- %TEMP%\tbtemp\TBUPDD.REG
- %TEMP%\tbtemp\reenum.exe
- %TEMP%\tbtemp\setup.cab
- %TEMP%\tbtemp\setup.cab__xxtmp
- %TEMP%\tbtemp\msvcrt.dll__xxtmp
- %TEMP%\tbtemp\setup.cab__xxtmp
- %TEMP%\tbtemp\expand.exe__xxtmp
- %TEMP%\tbtemp\cabinet.dll__xxtmp
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''