Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Update' = '%APPDATA%\svchost.exe'
- '%APPDATA%\svchost.exe'
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.XML.locked
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html.locked
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.js.locked
- %HOMEPATH%\Templates\winword.doc.locked
- %HOMEPATH%\Templates\winword2.doc.locked
- %HOMEPATH%\Templates\wordpfct.wpd.locked
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css.locked
- %APPDATA%\Microsoft\Internet Explorer\brndlog.bak.locked
- %APPDATA%\Microsoft\Internet Explorer\brndlog.txt.locked
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.bak.locked
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.js.locked
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css.locked
- %TEMP%\aut2.tmp
- %TEMP%\rtsskyn
- %APPDATA%\30D41DF5A58C74FBC4CDD0D1B6B90B9C
- %TEMP%\aut1.tmp
- %TEMP%\brieckg
- %APPDATA%\svchost.exe
- %HOMEPATH%\Templates\powerpnt.ppt.locked
- %HOMEPATH%\Templates\quattro.wb2.locked
- %HOMEPATH%\Templates\sndrec.wav.locked
- %HOMEPATH%\Templates\excel.xls.locked
- %APPDATA%\AF9ADAA59D8C103D72443BE53A981E4F
- %HOMEPATH%\Templates\excel4.xls.locked
- %TEMP%\aut2.tmp
- %TEMP%\rtsskyn
- %TEMP%\aut1.tmp
- %TEMP%\brieckg
- ClassName: 'Shell_TrayWnd' WindowName: ''