Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'uus' = '%ProgramFiles%\uusee\UUSeePlayer.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\uusee\UUSeePlayer.exe' = '%ProgramFiles%\uusee\UUSeePla...
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%CommonProgramFiles%\uusee\UUSeeMediaCenter.exe' = '%CommonProgramFile...
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\uusee\UUSeePlayer.exe' = '%ProgramFiles%\uusee\UUSe...
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%CommonProgramFiles%\uusee\UUSeeMediaCenter.exe' = '%CommonProgram...
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\Funshion Online\Funshion\Funshion.exe' = '%ProgramF...
- %TEMP%\rarsfx0\all.exe
- %TEMP%\rarsfx0\reg.reg
- %TEMP%\rarsfx0\all2.exe
- %TEMP%\rarsfx0\all.exe
- %TEMP%\rarsfx0\all2.exe
- %TEMP%\rarsfx0\reg.reg
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%TEMP%\rarsfx0\all.exe' /S
- '%TEMP%\rarsfx0\all2.exe' /S
- '%WINDIR%\regedit.exe' /s reg.reg