Техническая информация
- [<HKLM>\SOFTWARE\Classes\lnkfile\Shell\Open\Command] '' = '"%WINDIR%\TKLobby.ico" "%1"'
- [<HKLM>\SOFTWARE\Classes\none\Shell\Open\Command] '' = '"" "%1"'
- %HOMEPATH%\Start Menu\Programs\Startup\itlnk.lke
- '%TEMP%\RarSFX0\gb4.exe'
- '%WINDIR%\pHigger.exe'
- '%TEMP%\RarSFX0\Youbak_MSN_PARTNER2093.exe' /VERYSILENT /SP- /NORESTART
- '%TEMP%\is-31NJ0.tmp\Youbak_MSN_PARTNER2093.tmp' /SL5="$50092,483032,53248,%TEMP%\RarSFX0\Youbak_MSN_PARTNER2093.exe" /VERYSILENT /SP- /NORESTART
- %WINDIR%\pHigger.exe
- %WINDIR%\config.ini
- %WINDIR%\TKLobby.ico
- %HOMEPATH%\Favorites\ЧоґМј¤µДУОП·.lke
- %HOMEPATH%\Desktop\ЧоґМј¤µДУОП·.lke
- %WINDIR%\itlnk.lke
- %TEMP%\RarSFX0\baidutools.exe
- %TEMP%\RarSFX0\gb4.exe
- %TEMP%\RarSFX0\Youbak_MSN_PARTNER2093.exe
- %TEMP%\is-GQ96J.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-GQ96J.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-31NJ0.tmp\Youbak_MSN_PARTNER2093.tmp
- %TEMP%\is-31NJ0.tmp\Youbak_MSN_PARTNER2093.tmp
- %TEMP%\is-GQ96J.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-GQ96J.tmp\_isetup\_RegDLL.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'