Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SAP' = 'c:\SAP.exe'
- '%TEMP%\WKIX32.EXE' -q SAP.kix
- 'C:\SAP.exe'
- '%TEMP%\SAP\WKIX32.EXE' -q SAP_run.kix
- %TEMP%\SERVICES
- %TEMP%\saplogon.ini
- %TEMP%\SAP.kix
- %TEMP%\WKIX32.EXE
- %TEMP%\SAP\WKIX32.EXE
- %TEMP%\SAP\SAP_run.kix
- C:\SAP.exe
- %TEMP%\SAP\SAP.exe
- %TEMP%\SAP\SAP.exe
- %TEMP%\SAP\SAP_run.kix
- %TEMP%\SAP\WKIX32.EXE
- %TEMP%\WKIX32.EXE
- %TEMP%\SAP.kix
- %TEMP%\saplogon.ini
- %TEMP%\SERVICES
- ClassName: 'isdelete' WindowName: ''
- ClassName: '' WindowName: '154531/2872'
- ClassName: 'Shell_TrayWnd' WindowName: ''