Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ImDisk] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\ImDisk] 'ImagePath' = '%TEMP%\nsu2.tmp\Tools\Imdisk\sys\i386\imdisk.sys'
- \\Device\\HarddiskVolume1\\Documents and Settings\\%USERNAME%\\Local Settings\\Temp\\nsu2.tmp\\\u0491\u0443\u0421\u042b\u0427\u0420~\u0420\u0441.url
- \\Device\\HarddiskVolume1\\Muldrop\\\u0491\u0443\u0421\u042b\u0427\u0420~\u0420\u0441.vsm_0
- '%TEMP%\nsu2.tmp\WinNTSetup_x86.exe'