Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\PictureTaker] 'ImagePath' = '<SYSTEM32>\PCTKRNT.SYS'
- %TEMP%\pctkrnt.sys
- <SYSTEM32>\pctkrnt.sys
- %TEMP%\unapply\<Имя файла>.pwr
- %CommonProgramFiles%\symantec shared\virusdefs\usage.dat
- %ProgramFiles%\norton antivirus\logs\12112000.log
- C:\~glbs382.tmp
- %WINDIR%\aim95\pchristmann56\buddy.lst
- %WINDIR%\aim95\pchristmann56\urlcache\aim1032.tmp
- %WINDIR%\aim95\pchristmann56\urlcache\aim2242.tmp
- %WINDIR%\aim95\pchristmann56\urlcache\aim2251.tmp
- %WINDIR%\aim95\pchristmann56\urlcache\aimd085.tmp
- %WINDIR%\aim95\pchristmann56\urlcache\urlcache.dat
- %WINDIR%\applog\applog.ind
- %WINDIR%\cwbaudio.wcm
- %TEMP%\pctkrnt.sys
- '<SYSTEM32>\pctkrnt.sys'