Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\winlogon.exe' = '<SYSTEM32>\winlogon.exe:*:enabled:@shell32.dll,-1'
- %WINDIR%\Temp\vpowefcwpb\WinDrvGhost.exe
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Temp\vpowefcwpb\Uninstal.exe
- %WINDIR%\Temp\vpowefcwpb\registerFR.rtf
- %WINDIR%\Temp\vpowefcwpb\UNWISE.EXE
- %WINDIR%\Temp\vpowefcwpb\WinDrvGhost.exe
- %WINDIR%\Temp\vpowefcwpb\UNWISE.INI
- %WINDIR%\Temp\vpowefcwpb\LicenseEN.rtf
- %WINDIR%\Temp\vpowefcwpb\INSTALL.LOG
- %WINDIR%\Temp\vpowefcwpb\ManuelEN.rtf
- %WINDIR%\Temp\vpowefcwpb\RegisterEN.rtf
- %WINDIR%\Temp\vpowefcwpb\ManuelFR.rtf
- 'ir#.zief.pl':80
- DNS ASK ir#.zief.pl
- '<IP-адрес в локальной сети>':1037
- ClassName: 'Shell_TrayWnd' WindowName: ''