Техническая информация
- %TEMP%\nsy2.tmp\ns3.tmp "<SYSTEM32>\cscript.exe" "%PROGRAM_FILES%\WinSafe\kk.ill"
- <SYSTEM32>\cscript.exe "%PROGRAM_FILES%\WinSafe\kk.ill"
- [<HKCU>\Software\FlashFXP]
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoInternetIcon' = '00000001'
- %PROGRAM_FILES%\Microsoft\pack.dat
- %PROGRAM_FILES%\WinSafe\win.dat
- %PROGRAM_FILES%\Microsoft\t
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.txt
- %PROGRAM_FILES%\Microsoft\in
- %TEMP%\nsy2.tmp\nsExec.dll
- %TEMP%\nsy2.tmp\ns3.tmp
- %PROGRAM_FILES%\WinSafe\kk.ill
- %PROGRAM_FILES%\WinSafe\33.dat
- %ALLUSERSPROFILE%\Templates\kk.ill
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
- %TEMP%\nsy2.tmp\System.dll
- %HOMEPATH%\My Documents\backup\desktop.ini
- %PROGRAM_FILES%\Microsoft\y.dat
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\web.icw
- %HOMEPATH%\Desktop\Internat Exlporer.lnk
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internat Exlporer.lnk
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.txt
- %HOMEPATH%\My Documents\backup\Windows Media Player.lnk
- %HOMEPATH%\My Documents\backup\Launch Internet Explorer Browser.lnk
- %HOMEPATH%\My Documents\backup\Show Desktop.scf
- %HOMEPATH%\My Documents\backup\Show Desktop.scf
- %HOMEPATH%\My Documents\backup\Windows Media Player.txt
- %HOMEPATH%\My Documents\backup\desktop.ini
- %HOMEPATH%\My Documents\backup\Launch Internet Explorer Browser.txt