Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %HOMEPATH%\Start Menu\Programs\Startup\ST5UNST Uninstaller.LNK
- '%TEMP%\IXP000.TMP\SETUP.EXE'
- %TEMP%\IXP000.TMP\SETUP.LST
- %TEMP%\IXP000.TMP\ST5UNST.EX_
- %TEMP%\IXP000.TMP\VB5StKit.dl_
- %TEMP%\IXP000.TMP\README.TXT
- %TEMP%\IXP000.TMP\setup1.ex_
- %TEMP%\IXP000.TMP\SETUP.EXE
- %WINDIR%\SETUP.LST
- <SYSTEM32>\temp.000
- %TEMP%\~DF8BF5.tmp
- %TEMP%\IXP000.TMP\VENDOR.DO_
- %WINDIR%\ST5UNST.000
- %WINDIR%\temp.000
- %TEMP%\IXP000.TMP\order.do_
- %TEMP%\IXP000.TMP\CHECKERS.BM_
- %TEMP%\IXP000.TMP\CLAPPING.WA_
- %TEMP%\IXP000.TMP\ComCat.dl_
- %TEMP%\IXP000.TMP\ALIEN1.jp_
- %TEMP%\IXP000.TMP\alien2.jp_
- %TEMP%\IXP000.TMP\BEACHBLS.jp_
- %TEMP%\IXP000.TMP\JIGSAW.ch_
- %TEMP%\IXP000.TMP\JIGSAW.WA_
- %TEMP%\IXP000.TMP\MSVBVM50.dl_
- %TEMP%\IXP000.TMP\DONUTS.jp_
- %TEMP%\IXP000.TMP\FILE_ID.DI_
- %TEMP%\IXP000.TMP\jigsaw.ex_
- <SYSTEM32>\temp.000 в <SYSTEM32>\VB5StKit.dll
- %WINDIR%\temp.000 в %WINDIR%\setup1.exe
- %WINDIR%\temp.000 в %WINDIR%\ST5UNST.EXE
- %WINDIR%\temp.000
- ClassName: 'GVBSetupInit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''