Техническая информация
- скрытых файлов
- '%TEMP%\nst3.tmp\ns5.tmp' "<SYSTEM32>\wscript.exe" "%PROGRAM_FILES%\Messenger\messenger.kce"
- '%TEMP%\nst3.tmp\ns4.tmp' "<SYSTEM32>\cscript.exe" "%CommonProgramFiles%\System\ado\myie.vbs"
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\Messenger\messenger.kce"
- '<SYSTEM32>\cscript.exe' "%CommonProgramFiles%\System\ado\myie.vbs"
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoInternetIcon' = '00000001'
- %TEMP%\nst3.tmp\nsProcess.dll
- %TEMP%\uninst.exe
- %TEMP%\nst3.tmp\nsExec.dll
- %TEMP%\nst3.tmp\ns5.tmp
- %TEMP%\nst3.tmp\ns4.tmp
- <SYSTEM32>\flash.scf
- %TEMP%\nsj2.tmp
- %PROGRAM_FILES%\Messenger\taodwq.ico
- %TEMP%\sogou.ini
- %TEMP%\nst3.tmp\System.dll
- %TEMP%\nst3.tmp\nsExec.dll
- %TEMP%\nst3.tmp\nsProcess.dll
- %TEMP%\nst3.tmp\System.dll
- %TEMP%\uninst.exe
- %TEMP%\nst3.tmp\ns4.tmp
- %TEMP%\nst3.tmp\ns5.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'