Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv.exe -o'
- %APPDATA%\Microsoft\Word\Startup\SET4.tmp
- <SYSTEM32>\SET5.tmp
- %TEMP%\IXP000.TMP\atl_nt.dll
- %APPDATA%\Microsoft\Word\Startup\SET3.tmp
- %WINDIR%\Temp\OLD8.tmp
- <SYSTEM32>\SET9.tmp
- <SYSTEM32>\SET6.tmp
- %WINDIR%\LastGood\TMP7.tmp
- %TEMP%\IXP000.TMP\atl_9x.dll
- %TEMP%\IXP000.TMP\w95inf32.dll
- %TEMP%\IXP000.TMP\toms97.dot
- %TEMP%\IXP000.TMP\advpack.dll
- %TEMP%\IXP000.TMP\w95inf16.dll
- %TEMP%\IXP000.TMP\WM2000lt.inf
- %TEMP%\IXP000.TMP\XHyphen.dll
- %TEMP%\IXP000.TMP\abbr.txt
- %TEMP%\IXP000.TMP\BltRim97.dll
- %TEMP%\IXP000.TMP\toms97.dot
- %TEMP%\IXP000.TMP\abbr.txt
- %TEMP%\IXP000.TMP\BltRim97.dll
- %TEMP%\IXP000.TMP\advpack.dll
- %TEMP%\IXP000.TMP\w95inf16.dll
- %TEMP%\IXP000.TMP\w95inf32.dll
- %TEMP%\IXP000.TMP\atl_nt.dll
- %WINDIR%\Temp\OLD8.tmp
- <SYSTEM32>\SET9.tmp
- %TEMP%\IXP000.TMP\WM2000lt.inf
- %TEMP%\IXP000.TMP\XHyphen.dll
- %TEMP%\IXP000.TMP\atl_9x.dll
- <SYSTEM32>\SET6.tmp в <SYSTEM32>\BltRim97.dll
- %WINDIR%\LastGood\TMP7.tmp в %WINDIR%\LastGood\system32\atl.dll
- <SYSTEM32>\SET5.tmp в <SYSTEM32>\xhyphen.dll
- %APPDATA%\Microsoft\Word\Startup\SET3.tmp в %APPDATA%\Microsoft\Word\Startup\toms97.dot
- %APPDATA%\Microsoft\Word\Startup\SET4.tmp в %APPDATA%\Microsoft\Word\Startup\abbr.txt