Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SmartRAM' = '"<Текущая директория>\Suo10_SmartRAM.exe" /m'
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASC6_AutoUpdate /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASC6_AutoCare /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASCv6_AutoUpdateD /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASC6_AutoClean /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASC5_AutoUpdate /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASC5_AutoCare /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASCv5_AutoUpdateD /F
- '<SYSTEM32>\schtasks.exe' /Delete /TN ASC5_AutoClean /F
- %ALLUSERSPROFILE%\Application Data\vis.ico
- %ALLUSERSPROFILE%\Start Menu\Programs\Компьютерная помощь.lnk
- %TEMP%\nsi2.tmp\ShellLink.dll
- %TEMP%\nsi2.tmp\GetVersion.dll
- %TEMP%\nsi2.tmp\System.dll
- %TEMP%\nsi2.tmp\ExecCmd.dll
- %TEMP%\nsi2.tmp\locate.dll
- %ALLUSERSPROFILE%\Application Data\vis.ico
- %TEMP%\nsi2.tmp\locate.dll
- %TEMP%\nsi2.tmp\ShellLink.dll
- %TEMP%\nsi2.tmp\System.dll
- %WINDIR%\Temp\Perflib_Perfdata_7e8.dat
- %TEMP%\nsi2.tmp\ExecCmd.dll
- %TEMP%\nsi2.tmp\GetVersion.dll
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: '#32770' WindowName: '(null)'