Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %TEMP%\IXP000.TMP\QT1.exe
- <SYSTEM32>\QuickTime\QuickTimeStreaming.qtx
- <SYSTEM32>\QuickTime\QuickTimeMPEG4.qtx
- <SYSTEM32>\QuickTime\QuickTimeMPEG.qtx
- <SYSTEM32>\QuickTime\QuickTimeInternetExtras.qtx
- <SYSTEM32>\QuickTime\QuickTimeEssentials.qtx
- <SYSTEM32>\QuickTime\IPIXSupport.qtx
- <SYSTEM32>\QuickTime.qts
- <SYSTEM32>\QuickTimeCheck.ocx
- <SYSTEM32>\QuickTime.cpl
- %ProgramFiles%\QuickTime\qt.reg
- %ALLUSERSPROFILE%\Application Data\QuickTime\QuickTime.qtp
- %ProgramFiles%\QuickTime\QTPlugin.ocx
- %ProgramFiles%\Internet Explorer\PLUGINS\QuickTimePlugin.class
- %ProgramFiles%\Internet Explorer\PLUGINS\npqtplugin.dll
- %ProgramFiles%\QuickTime\qttask.exe
- %ProgramFiles%\QuickTime\qt.bat
- %TEMP%\IXP000.TMP\QT2.exe
- <SYSTEM32>\QuickTime\QuickTimeStreamingExtras.qtx
- <SYSTEM32>\QuickTime\QuickTimeWebHelper.qtx
- %TEMP%\IXP000.TMP\QT2.exe
- %TEMP%\IXP000.TMP\QT1.exe
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\IXP000.TMP\QT1.exe'
- '%TEMP%\IXP000.TMP\QT2.exe'