Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\W32Time] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' stop w32time
- '<SYSTEM32>\sc.exe' config w32time start= auto
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen C:\view.jpg
- 'C:\Update.rar'
- %ProgramFiles%\Mjtqs\RCX1.tmp
- %TEMP%\kb-189687.tmp
- %ProgramFiles%\Atgrg\RCX2.tmp
- %TEMP%\kb-173812.tmp
- C:\view.jpg
- C:\Update.rar
- C:\Unlock.log
- %ProgramFiles%\Atgrg\Xgqpy.dll
- %ProgramFiles%\Mjtqs\Oppir.xlp
- %TEMP%\kb-189687.tmp в %ProgramFiles%\Atgrg\Xgqpy.dll
- %TEMP%\kb-173812.tmp в %ProgramFiles%\Mjtqs\Oppir.xlp
- %ProgramFiles%\Atgrg\Xgqpy.dll
- %ProgramFiles%\Mjtqs\Oppir.xlp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''