Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f92B23AB-A707-22d2-9CBD-0000F87A469H}] 'StubPath' = '%ALLUSERSPROFILE%\ingss.exe'
- [<HKLM>\SOFTWARE\Classes\url|chm|vbs\Shell\Open\Command] '' = '"%PROGRAM_FILES%\Windows NT\hypertrm.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\ini\Shell\Open\Command] '' = '"%PROGRAM_FILES%\WinRAR\mplaye.exe" "%1"'
- %PROGRAM_FILES%\Windows NT\hypertrm.exe
- '%ALLUSERSPROFILE%\ingss.exe' -a
- 'C:\Documents and Settings\allkv.exe'
- '%ALLUSERSPROFILE%\ingss.exe'
- C:\Documents and Settings\allkv.exe
- %ALLUSERSPROFILE%\ingss.exe