Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,C:\PROGRA~1\INTERN~1\Plugins\wmPlug\wmdoc.exe'
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\wmPlug\wmdoc.exe Explorer\Plugins\wmPlug\wmdoc.exe
- <SYSTEM32>\regsvr32.exe /s %PROGRAM_FILES%\Internet Explorer\plugins\wmplug\domai.dll
- %WINDIR%\Explorer.EXE
- ClassName: 'TXGuiFoundation' WindowName: ''
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\wmPlug\wmdoc.exe
- %WINDIR%\cscui.dll
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\wmPlug\domai.dll
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\wmPlug\QQPet.dll
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\wmPlug\RCX1.tmp
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\wmPlug\QQPet.dll
- ClassName: '#32770' WindowName: ''