Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %HOMEPATH%\Start Menu\Programs\Startup\ST5UNST Uninstaller.LNK
- '%TEMP%\IXP000.TMP\Setup.exe'
- %TEMP%\IXP000.TMP\Setup.lst
- %TEMP%\IXP000.TMP\setup1.ex_
- %TEMP%\IXP000.TMP\St5unst.ex_
- %TEMP%\IXP000.TMP\OleAut32.dl_
- %TEMP%\IXP000.TMP\OlePro32.dl_
- %TEMP%\IXP000.TMP\Setup.exe
- %TEMP%\IXP000.TMP\StdOle2.tl_
- %WINDIR%\temp.000
- %WINDIR%\SETUP.LST
- <SYSTEM32>\temp.000
- %TEMP%\IXP000.TMP\Survey.hl_
- %TEMP%\IXP000.TMP\AsycFilt.dl_
- %WINDIR%\ST5UNST.000
- %TEMP%\IXP000.TMP\comdlg32.oc_
- %TEMP%\IXP000.TMP\Ctl3d32.dl_
- %TEMP%\IXP000.TMP\dao2535.tl_
- %TEMP%\IXP000.TMP\VB5StKit.dl_
- %TEMP%\IXP000.TMP\ComCat.dl_
- %TEMP%\IXP000.TMP\comctl32.oc_
- %TEMP%\IXP000.TMP\Dao350.dl_
- %TEMP%\IXP000.TMP\MSSurvey.exe
- %TEMP%\IXP000.TMP\MSVBVM50.dl_
- %TEMP%\IXP000.TMP\MSVCRT40.dl_
- %TEMP%\IXP000.TMP\MSJInt35.dl_
- %TEMP%\IXP000.TMP\MSJtEr35.dl_
- %TEMP%\IXP000.TMP\MSSurvey.DE_
- <SYSTEM32>\temp.000 в <SYSTEM32>\VB5StKit.dll
- %WINDIR%\temp.000 в %WINDIR%\setup1.exe
- %WINDIR%\temp.000 в %WINDIR%\ST5UNST.EXE
- %WINDIR%\temp.000
- ClassName: 'GVBSetupInit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''