Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Safety Anti-Spyware' = '%ProgramFiles%\Safety Anti-Spyware\Safety Anti-Spyware.exe'
- Диспетчера задач (Taskmgr)
- '%WINDIR%\explorer.exe'
- '<SYSTEM32>\cmd.exe' /c del <Полный путь к вирусу> > nul
- %WINDIR%\Explorer.EXE
- firefox.exe
- chrome.exe
- ICQ.exe
- opera.exe
- %HOMEPATH%\Desktop\Safety Anti-Spyware.lnk
- %HOMEPATH%\Start Menu\Safety Anti-Spyware\Safety Anti-Spyware.lnk
- %ProgramFiles%\Safety Anti-Spyware\Safety Anti-Spyware.exe
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Safety Anti-Spyware.lnk
- ClassName: 'Proxy Desktop' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''