Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WNvMcTrayin.EXE' = '<SYSTEM32>\uni\WNvMcTrayin.EXE'
- <SYSTEM32>\~GLH0001.TMP
- <SYSTEM32>\~GLH0002.TMP
- <SYSTEM32>\~GLH0003.TMP
- %TEMP%\GLC1.tmp
- %TEMP%\GLK2.tmp
- <SYSTEM32>\uni\~GLH0000.TMP
- %TEMP%\GLC1.tmp
- %TEMP%\GLK2.tmp
- <SYSTEM32>\eula.txt
- <SYSTEM32>\~GLH0003.TMP в <SYSTEM32>\oeminfo.ini
- <SYSTEM32>\~GLH0001.TMP в <SYSTEM32>\Oemlogo.bmp
- <SYSTEM32>\uni\~GLH0000.TMP в <SYSTEM32>\uni\WNvMcTrayin.EXE
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''