Техническая информация
- %TEMP%\_ir_sf7_temp_0\vb6sp6\VBRun60sp6.exe /R:N
- %TEMP%\_ir_sf7_temp_0\irsetup.exe "__IRAFN:<Полный путь к вирусу>"
- %WINDIR%\Temp\OLD7.tmp
- <SYSTEM32>\SET8.tmp
- %WINDIR%\LastGood\TMP9.tmp
- %WINDIR%\LastGood\TMP6.tmp
- %WINDIR%\LastGood\TMP3.tmp
- %WINDIR%\Temp\OLD4.tmp
- <SYSTEM32>\SET5.tmp
- %WINDIR%\Temp\OLDA.tmp
- %WINDIR%\LastGood\TMPF.tmp
- %WINDIR%\Temp\OLD10.tmp
- <SYSTEM32>\SET11.tmp
- <SYSTEM32>\SETE.tmp
- <SYSTEM32>\SETB.tmp
- %WINDIR%\LastGood\TMPC.tmp
- %WINDIR%\Temp\OLDD.tmp
- %TEMP%\IXP000.TMP\W95INF16.DLL
- %TEMP%\_ir_sf7_temp_0\IRIMG3.JPG
- %TEMP%\_ir_sf7_temp_0\vb6sp6\VBRun60sp6.exe
- %TEMP%\IXP000.TMP\vbrun60.inf
- %TEMP%\_ir_sf7_temp_0\IRIMG2.JPG
- %TEMP%\_ir_sf7_temp_0\irsetup.exe
- %TEMP%\_ir_sf7_temp_0\irsetup.dat
- %TEMP%\_ir_sf7_temp_0\IRIMG1.JPG
- %TEMP%\IXP000.TMP\asycfilt.dll
- %TEMP%\IXP000.TMP\comcat.dll
- %TEMP%\IXP000.TMP\ADVPACK.DLL
- %TEMP%\IXP000.TMP\W95INF32.DLL
- %TEMP%\IXP000.TMP\msvbvm60.dll
- %TEMP%\IXP000.TMP\oleaut32.dll
- %TEMP%\IXP000.TMP\olepro32.dll
- %TEMP%\IXP000.TMP\stdole2.tlb
- <SYSTEM32>\SETB.tmp
- <SYSTEM32>\SETE.tmp
- <SYSTEM32>\SET8.tmp
- %TEMP%\_ir_sf7_temp_0\irsetup.dat
- <SYSTEM32>\SET5.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''