Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e8a1555f-1add-4f0c-ba46-0fbe5a17b3ea}]
- %ProgramFiles%\GoSaave\mBB78KkGTucXRd.x64.dll
- %ProgramFiles%\GoSaave\mBB78KkGTucXRd.dat
- %ALLUSERSPROFILE%\Application Data\GoSaave\Osu7ZwFFia8jVZi.exe
- %ALLUSERSPROFILE%\Application Data\6e958a80feb239af\{C87834EB-A2A0-B9D4-AA9A-C263D1191051}.20180324185715
- %ALLUSERSPROFILE%\Application Data\GoSaave\Osu7ZwFFia8jVZi.dat
- %ProgramFiles%\GoSaave\mBB78KkGTucXRd.tlb
- %TEMP%\40344525\mBB78KkGTucXRd.dll
- %TEMP%\40344525\Osu7ZwFFia8jVZi.dat
- %TEMP%\40344525\mBB78KkGTucXRd.tlb
- %ProgramFiles%\GoSaave\mBB78KkGTucXRd.dll
- %TEMP%\40344525\mBB78KkGTucXRd.x64.dll
- %TEMP%\40344525\mBB78KkGTucXRd.tlb
- %TEMP%\40344525\mBB78KkGTucXRd.x64.dll
- %TEMP%\40344525\Osu7ZwFFia8jVZi.dat
- %TEMP%\40344525\mBB78KkGTucXRd.dll
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\GoSaave\mBB78KkGTucXRd.x64.dll"