Техническая информация
- [<HKLM>\SOFTWARE\Classes\yibo\shell\open\command] '' = '%PROGRAM_FILES%\YiBo\play.exe %1'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '?????' = '%PROGRAM_FILES%\YiBo\YBProces.exe'
- %PROGRAM_FILES%\YiBo\play.exe
- %PROGRAM_FILES%\YiBo\FSkill.exe /run
- <SYSTEM32>\ping.exe -n 1 127.1
- <SYSTEM32>\cmd.exe /c FSkill.bat
- %PROGRAM_FILES%\YiBo\images\loding.gif
- %PROGRAM_FILES%\NetMeeting\Setting\SetTing.ini
- %PROGRAM_FILES%\YiBo\8.jss
- %PROGRAM_FILES%\YiBo\VnetClinfo.ocx
- %PROGRAM_FILES%\YiBo\YiBopal.exe
- %PROGRAM_FILES%\NetMeeting\Setting\ConFig.ini
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\ТЧІҐУ°ТфєР.lnk
- %PROGRAM_FILES%\YiBo\Uninstall.exe
- %HOMEPATH%\Desktop\ТЧІҐУ°ТфєР.lnk
- <SYSTEM32>\PICCLP323.OCX.new
- %HOMEPATH%\Start Menu\Programs\ТЧІҐУ°ТфєР\ТЧІҐУ°ТфєР.lnk
- %PROGRAM_FILES%\YiBo\FSkill.bat
- %PROGRAM_FILES%\YiBo\FSkill.exe
- %TEMP%\nsk2.tmp
- %TEMP%\nsp3.tmp\KillProcDLL.dll
- %PROGRAM_FILES%\YiBo\update.exe
- %PROGRAM_FILES%\YiBo\vico.ocx
- %PROGRAM_FILES%\YiBo\Communicate.dll
- %PROGRAM_FILES%\YiBo\AniGIF.ocx
- %PROGRAM_FILES%\YiBo\protections.exe
- %PROGRAM_FILES%\YiBo\play.exe
- %PROGRAM_FILES%\YiBo\Uninstall.exe
- %TEMP%\nsp3.tmp\KillProcDLL.dll
- %TEMP%\~DFD5F3.tmp
- %PROGRAM_FILES%\YiBo\FSkill.exe
- <SYSTEM32>\PICCLP323.OCX.new в <SYSTEM32>\PICCLP323.OCX
- ClassName: 'SysPager' WindowName: ''
- ClassName: 'ToolbarWindow32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TrayNotifyWnd' WindowName: ''