Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WMS] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\WMS] 'ImagePath' = '%WINDIR%\wmu\wnetmon.exe'
- [<HKLM>\SYSTEM\ControlSet002\Services\WMS] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\WMS] 'ImagePath' = '%WINDIR%\wmu\wnetmon.exe'
- %WINDIR%\wmu\wnetmon.exe
- %WINDIR%\wmu\unsecapp.exe
- %ProgramFiles%\Patch\Waves\Waves_Complete_10.0.0.16_patch.exe
- %TEMP%\is-40IMG.tmp\Waves_Complete_10.0.0.16_patch.tmp
- %TEMP%\is-5RD1A.tmp\_isetup\_iscrypt.dll
- '%ProgramFiles%\Patch\Waves\Waves_Complete_10.0.0.16_patch.exe'
- '%TEMP%\is-40IMG.tmp\Waves_Complete_10.0.0.16_patch.tmp' /SL5="$1013E,1093626,486912,%ProgramFiles%\Patch\Waves\Waves_Complete_10.0.0.16_patch.exe"