Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Print\Monitors\NownnowPrinter Port] 'Driver' = 'nowdrv.dll'
- '%TEMP%\nsa2.tmp\ns4.tmp' net start Spooler
- '%TEMP%\nsa2.tmp\ns3.tmp' net stop Spooler
- '<SYSTEM32>\net1.exe' start Spooler
- '<SYSTEM32>\spoolsv.exe'
- '<SYSTEM32>\net.exe' start Spooler
- '<SYSTEM32>\net.exe' stop Spooler
- '<SYSTEM32>\net1.exe' stop Spooler
- %TEMP%\nsa2.tmp\ns3.tmp
- %TEMP%\nsa2.tmp\nsExec.dll
- %TEMP%\nsa2.tmp\ns4.tmp
- <SYSTEM32>\nowdrv.dll
- %ProgramFiles%\NOWNNOW\RemotePrinter\nowdrv.inf
- %TEMP%\nsa2.tmp\LangDLL.dll
- %ProgramFiles%\NOWNNOW\RemotePrinter\nowdrv.dll
- %ProgramFiles%\NOWNNOW\RemotePrinter\nowdrv.gpd
- %TEMP%\nsa2.tmp\ns3.tmp
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''