Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{61571BD6-C038-4897-A89A-5C61E23C72B9}' = ''
- %TEMP%\sfx1\_BBG.EXE /sfxv:a
- %TEMP%\update.exe
- %TEMP%\puzzle.exe
- <SYSTEM32>\cmd.exe /c %TEMP%\SelfDel.bat
- %TEMP%\sfx1\GIRA.WAV
- %TEMP%\sfx1\TOCA.WAV
- %TEMP%\sfx1\CLICK2.WAV
- %TEMP%\sfx1\FXR2R.WAV
- %TEMP%\sfx1\tex_def.jpg
- %TEMP%\sfx1\bbg.puz
- %TEMP%\sfx1\XOC.WAV
- %TEMP%\sfx1\BB30ENG.DIX
- %TEMP%\sfx1.tmp
- %TEMP%\tmp0.tmp
- %TEMP%\puzzle.exe
- %TEMP%\update.exe
- %TEMP%\sfx1\_BBG.EXE
- %TEMP%\sfx1\CLICK1.WAV
- <SYSTEM32>\msinfo.dll
- %TEMP%\SelfDel.bat
- <SYSTEM32>\msinfo.dll
- %TEMP%\tmp0.tmp
- %TEMP%\sfx1.tmp
- %TEMP%\puzzle.exe
- %TEMP%\update.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''