Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '!Free FLV ConverterOnce' = '%TEMP%\cmnd\file.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'farcomp32' = 'C:\\WINDOWS\\system32\\farcomp32.exe'
- '%TEMP%\cmnd\file.exe'
- '%TEMP%\cmnd\cmnd.exe'
- %TEMP%\nsk4\Uninstall.exe
- %TEMP%\nsk4\Helper.dll
- %TEMP%\nsk4\license.txt
- %TEMP%\nsk4\TorchBackground.bmp
- %TEMP%\nsk4.tmp\nsDialogs.dll
- %ALLUSERSPROFILE%\Desktop\Free FLV Converter.lnk
- %PROGRAM_FILES%\Free FLV Converter\log.log
- %TEMP%\nsk4.tmp\UAC.dll
- %TEMP%\aut1.tmp
- %TEMP%\cmnd\file.exe
- %TEMP%\cmnd\cmnd.exe
- <SYSTEM32>\farcomp32.exe
- %TEMP%\nsk4.tmp\System.dll
- %TEMP%\nsk4.tmp\modern-header.bmp
- %TEMP%\nsp3.tmp
- %TEMP%\aut1.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''