Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NeroFilterCheck' = '"<SYSTEM32>\NeroCheck.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'UnlockerAssistant' = '"%PROGRAM_FILES%\Unlocker\UnlockerAssistant.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SunJavaUpdateSched' = '"%CommonProgramFiles%\Java\Java Update\jusched.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'TkBellExe' = '"%CommonProgramFiles%\Real\Update_OB\realsched.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Adobe ARM' = '"%CommonProgramFiles%\Adobe\ARM\1.0\AdobeARM.exe"'
- '%WINDIR%\AutoUpdater.exe'
- %CommonProgramFiles%\Real\Update_OB\realsched.exe
- <SYSTEM32>\NeroCheck.exe
- %WINDIR%\AutoUpdater.exe
- %PROGRAM_FILES%\Unlocker\UnlockerAssistant.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %CommonProgramFiles%\Adobe\ARM\1.0\AdobeARM.exe
- %CommonProgramFiles%\Java\Java Update\jusched.exe
- %CommonProgramFiles%\Real\Update_OB\realsched.exe
- %PROGRAM_FILES%\Unlocker\UnlockerAssistant.exe
- <SYSTEM32>\NeroCheck.exe
- %CommonProgramFiles%\Java\Java Update\jusched.exe
- %CommonProgramFiles%\Adobe\ARM\1.0\AdobeARM.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'