Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run\] 'lsass.exe' = '%WINDIR%\lsass.exe'
- ClassName: 'TibiaClient', WindowName: ''
- %WINDIR%\syswow64\winrar.exe
- %WINDIR%\syswow64\setup-4.7.1.exe
- %TEMP%\is-8lhk8.tmp\is-v0q7m.tmp
- %WINDIR%\lsass.exe
- %WINDIR%\syswow64\winrar.exe
- %WINDIR%\syswow64\setup-4.7.1.exe
- ClassName: 'EDIT' WindowName: ''
- '%WINDIR%\syswow64\setup-4.7.1.exe'
- '%WINDIR%\syswow64\winrar.exe'
- '%TEMP%\is-8lhk8.tmp\is-v0q7m.tmp' /SL4 $701B6 "%WINDIR%\SysWOW64\setup-4.7.1.exe" 3356206 52736