Техническая информация
- [HKLM\System\CurrentControlSet\Services\WinDivert] 'ImagePath' = '%WINDIR%\SysWOW64\drivers\Youtube Drivers\Programs\WinDivert64.sys'
- 'WinDivert' %WINDIR%\SysWOW64\drivers\Youtube Drivers\Programs\WinDivert64.sys
- %WINDIR%\syswow64\drivers\youtube drivers\start.cmd
- %WINDIR%\syswow64\drivers\youtube drivers\youtube.txt
- %WINDIR%\syswow64\drivers\youtube drivers\programs\goodbyedpi.exe
- %WINDIR%\syswow64\drivers\youtube drivers\programs\windivert.dll
- %WINDIR%\syswow64\drivers\youtube drivers\programs\windivert64.sys
- %WINDIR%\syswow64\drivers\youtube drivers\blacklist.txt
- %WINDIR%\temp\udd67e6.tmp
- %WINDIR%\temp\udd73b9.tmp
- %WINDIR%\temp\udd7b87.tmp
- %WINDIR%\temp\udd8365.tmp
- %WINDIR%\temp\udd8b32.tmp
- %WINDIR%\temp\udd9300.tmp
- %WINDIR%\temp\udd67e6.tmp
- %WINDIR%\temp\udd73b9.tmp
- %WINDIR%\temp\udd7b87.tmp
- %WINDIR%\temp\udd8365.tmp
- %WINDIR%\temp\udd8b32.tmp
- %WINDIR%\temp\udd9300.tmp
- ClassName: 'EDIT' WindowName: ''
- '%WINDIR%\syswow64\drivers\youtube drivers\programs\goodbyedpi.exe' -9 --blacklist ..\Blacklist.txt --blacklist ..\Youtube.txt
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\SysWOW64\drivers\Youtube Drivers\Start.cmd" "