Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\truecrypt] 'ImagePath' = '%TEMP%\2k10\TrueCrypt\truecrypt.sys'
- %TEMP%\2k10\TrueCrypt\Language.xml
- %TEMP%\2k10\TrueCrypt\VeraCrypt\Languages\Language.ru.xml
- %TEMP%\2k10\TrueCrypt\TrueCrypt Format.exe
- %TEMP%\2k10\TrueCrypt\truecrypt-x64.sys
- %TEMP%\2k10\TrueCrypt\TrueCrypt.exe
- %TEMP%\2k10\TrueCrypt\truecrypt.sys
- %TEMP%\2k10\TrueCrypt\VeraCrypt\VeraCrypt Format.exe
- %TEMP%\2k10\TrueCrypt\VeraCrypt\veracrypt-x64.sys
- %TEMP%\2k10\TrueCrypt\VeraCrypt\VeraCrypt.exe
- %TEMP%\2k10\TrueCrypt\VeraCrypt\veracrypt.sys
- %TEMP%\2k10\TrueCrypt\VeraCrypt\Languages\Language.ru.xml
- %TEMP%\2k10\TrueCrypt\VeraCrypt\VeraCrypt Format.exe
- %TEMP%\2k10\TrueCrypt\VeraCrypt\veracrypt-x64.sys
- %TEMP%\2k10\TrueCrypt\VeraCrypt\VeraCrypt.exe
- %TEMP%\2k10\TrueCrypt\VeraCrypt\veracrypt.sys
- '%TEMP%\2k10\TrueCrypt\TrueCrypt.exe'
- '<SYSTEM32>\cmd.exe' /c rd /q/s VeraCrypt