Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{003g66230-a069-12d1-a5ar-00eb50985435b}] 'StubPath' = '%CommonProgramFiles%\ZBitInc\compreg.exe /startb'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{003g66230-a069-12d1-a5ar-00eb50985435a}] 'StubPath' = '%CommonProgramFiles%\ZBitInc\compreg.exe /starta'
- %TEMP%\<Имя вируса>.exe
- %TEMP%\tmp936yt.tmp /ins
- %TEMP%\tempq136.exe /ins <Имя вируса>.exe
- %CommonProgramFiles%\ZBitInc\compreg.exe
- %TEMP%\<Имя вируса>.exe
- %TEMP%\tempq136.exe
- %TEMP%\tmp936yt.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TFRegOp' WindowName: ''
- ClassName: 'TFRegWOp' WindowName: ''