Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'printr hp canon' = '<SYSTEM32>\glm.exe'
- '<SYSTEM32>\convert.exe' e: /FS:NTFS
- '<SYSTEM32>\convert.exe' f: /FS:NTFS
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\rundll32.exe' shell32.dll,Activate_RunDLL
- '<SYSTEM32>\convert.exe' c: /FS:NTFS
- '<SYSTEM32>\convert.exe' d: /FS:NTFS
- <SYSTEM32>\glm.exe
- <DRIVERS>\1998166900.exe
- <Текущая директория>\autorun.inf
- <SYSTEM32>\glm.exe
- <DRIVERS>\1998166900.exe
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\~DF5BBA.tmp
- ClassName: 'WMP9DeskBand' WindowName: 'WMP9DeskBand'
- ClassName: 'ReBarWindow32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''