Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{9B5C40EF-68EA-522A-1198-3490899D7599}] 'stubpath' = ''
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\twain_64.exe
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\Networking_Adapter_1.exe
- <SYSTEM32>\twaskll.exe
- %WINDIR%\explorer.exe
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\Microsoft\Protect\S-1-5-18\User\twain_32.dll.bat" "
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\Networking_Adapter_1.exe
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\twain_64.exe
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\twain_32.dll.bat
- <SYSTEM32>\Valid'SusRoamin\swapdisk.exe
- %TEMP%\xp corona.ini
- %APPDATA%\addon.dat
- <SYSTEM32>\twaskll.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\borlndmm.dll
- %PROGRAM_FILES%\ItalianFamily Gropup\Remote Administrador Tool\Uninstall.ini
- %PROGRAM_FILES%\ItalianFamily Gropup\Remote Administrador Tool\Uninstall.exe
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\Networking_Adapter_1.exe
- <SYSTEM32>\Valid'SusRoamin\swapdisk.exe
- %APPDATA%\addon.dat
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\borlndmm.dll
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\twain_32.dll.bat
- <SYSTEM32>\Microsoft\Protect\S-1-5-18\User\twain_64.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''