Техническая информация
- [<HKLM>\SOFTWARE\Classes\wcyfile\Shell\Open\Command] '' = '<SYSTEM32>\WScript.exe "%1" %*'
- [<HKLM>\SOFTWARE\Classes\cyvfile\shell\open\command] '' = 'WScript.exe "%WINDIR%\pipiCache.ymy" "%1"'
- '%WINDIR%\regedit.exe' /s c:\RegText375.reg
- '%ProgramFiles%\AA9CA6B3\coopen_setup_45703.exe'
- %TEMP%\nsi3.tmp\modern-wizard.bmp
- %ProgramFiles%\Internet Explorer\MUI\iexplore.exe
- %WINDIR%\newicon.ico
- %ProgramFiles%\Internet Explorer\SIGNUP\iexplore.exe
- C:\RegText375.reg
- <SYSTEM32>\flash.ico
- <SYSTEM32>\tao_bao.ico
- %TEMP%\nsx2.tmp
- %ProgramFiles%\AA9CA6B3\coopen_setup_45703.exe
- C:\A78F2B2F.log
- %WINDIR%\pipiCache.ymy
- %TEMP%\nsi3.tmp\ioSpecial.ini
- C:\CCPMachineInfo.dll
- %TEMP%\nsi3.tmp\System.dll
- %WINDIR%\pipiCache.ymy
- C:\RegText375.reg
- ClassName: '#32770' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'progman' WindowName: 'Program Manager'