Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\IOMC] 'Start' = '00000002'
- '%TEMP%\SETUP.EXE'
- '%CommonProgramFiles%\focens\cotsen.exe' /install /Silent
- '%TEMP%\RarSFX0\Setup.EXE'
- '%TEMP%\RarSFX0\AidemFileExplorerEnglish250.exe'
- %TEMP%\FILEEXP_2003.INI
- %TEMP%\SETUP.EXE
- %TEMP%\FILEEXP.PPC_SH3.CAB
- %TEMP%\FILEEXP.PPC_ARM_2003.CAB
- %TEMP%\FILEEXP.PPC_MIPS.CAB
- %CommonProgramFiles%\focens\liteos\stome.dll
- %CommonProgramFiles%\focens\sotane.exe
- %CommonProgramFiles%\focens\liteos\shsat.dll
- %CommonProgramFiles%\focens\cotsen.exe
- %CommonProgramFiles%\focens\jy.ini
- %TEMP%\RarSFX0\Setup.EXE
- %TEMP%\RarSFX0\Setup.ico
- %TEMP%\RarSFX0\rarinfo.txt
- %TEMP%\RarSFX0\gTemp.dat
- %TEMP%\RarSFX0\jTemp.dat
- %TEMP%\FILEEXP.INI
- %TEMP%\FILEEXP.PPC_ARM.CAB
- %TEMP%\FileExp.ico
- %TEMP%\RarSFX0\Setup.ini
- %TEMP%\SETUP.INF
- %TEMP%\RarSFX0\Setup.EXE
- %TEMP%\RarSFX0\Setup.ico
- %TEMP%\RarSFX0\Setup.ini
- %TEMP%\RarSFX0\rarinfo.txt
- %CommonProgramFiles%\focens\jy.ini
- %TEMP%\RarSFX0\AidemFileExplorerEnglish250.exe
- %TEMP%\RarSFX0\jTemp.dat
- %TEMP%\RarSFX0\gTemp.dat в %TEMP%\RarSFX0\AidemFileExplorerEnglish250.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'