Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv.exe -o'
- '%TEMP%\atl.exe' /q
- %CommonProgramFiles%\YDP\FlashComponents\ydpsndrecorder.dll
- %CommonProgramFiles%\YDP\FlashComponents\spectralanalisis.dll
- %WINDIR%\Temp\OLD6.tmp
- <SYSTEM32>\SET7.tmp
- %CommonProgramFiles%\YDP\FlashComponents\YDPSndRecorderII.dll
- %CommonProgramFiles%\YDP\FlashComponents\npymrs.dll
- %CommonProgramFiles%\YDP\FlashComponents\uninst.exe
- %CommonProgramFiles%\YDP\FlashComponents\YMultiRecordServer.dll
- %CommonProgramFiles%\YDP\FlashComponents\YMultiRecordServerps.dll
- %TEMP%\IXP000.TMP\atla.dll
- %TEMP%\IXP000.TMP\atlw.dll
- %TEMP%\nsl2.tmp
- %TEMP%\atl.exe
- %TEMP%\IXP000.TMP\atl.inf
- %TEMP%\IXP000.TMP\W95INF16.DLL
- %WINDIR%\LastGood\TMP5.tmp
- %TEMP%\IXP000.TMP\ADVPACK.DLL
- %TEMP%\IXP000.TMP\W95INF32.DLL
- %TEMP%\IXP000.TMP\atlw.dll
- %TEMP%\IXP000.TMP\atl.inf
- %TEMP%\atl.exe
- %TEMP%\IXP000.TMP\atla.dll
- %TEMP%\IXP000.TMP\ADVPACK.DLL
- %WINDIR%\Temp\OLD6.tmp
- <SYSTEM32>\SET7.tmp
- %TEMP%\IXP000.TMP\W95INF32.DLL
- %TEMP%\IXP000.TMP\W95INF16.DLL
- %WINDIR%\LastGood\TMP5.tmp в %WINDIR%\LastGood\system32\atl.dll
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'