Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Be3wsa' = '%ProgramFiles%\BE\be3wsa.exe'
- %ALLUSERSPROFILE%\Application Data\BE\be3hiv.dat
- %TEMP%\~e3010c30\be3ltl.dat
- %ProgramFiles%\BE\be3lgl.exe
- %TEMP%\~e3010c30\LDPInstallOptions.tmp
- %ProgramFiles%\BE\be3wsa.exe
- ClassName: 'be3wsa_app' WindowName: ''
- '%ProgramFiles%\BE\be3wsa.exe'