Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'install' = '%WINDIR%\WINDOWS\install.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'install' = '%WINDIR%\WINDOWS\install.exe'
- [<HKLM>\SOFTWARE\Classes\dllfile\shell\open\command] '' = 'rundll32.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%APPDATA%\mijn foto album.exe'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\install.exe.lnk
- %WINDIR%\WINDOWS\install.exe
- %APPDATA%\mijn solam.exe
- %APPDATA%\mijn foto album.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\WINDOWS\install.exe
- %WINDIR%\WINDOWS\install.sys
- %APPDATA%\mijn foto album.exe
- %APPDATA%\mijn solam.exe
- %WINDIR%\WINDOWS\install.sys
- %WINDIR%\WINDOWS\install.exe
- %APPDATA%\mijn solam.exe
- '12#.0.0.2':12345
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''