Техническая информация
- <SYSTEM32>\reg.exe QUERY "HKU\S-1-5-19"
- <SYSTEM32>\mode.com con: cols=75 lines=16
- <SYSTEM32>\cmd.exe /c ""%TEMP%\ATR.bat" "
- <SYSTEM32>\mode.com con: cols=75 lines=15
- %PROGRAM_FILES%\encrupting.narod.ru\avast! Installer.jpg
- %PROGRAM_FILES%\encrupting.narod.ru\Мы Вконтакте.url
- %TEMP%\ATR.bat
- %HOMEPATH%\Desktop\Мы Вконтакте.lnk
- %HOMEPATH%\Desktop\Обновить лицензию avast!.lnk
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %PROGRAM_FILES%\encrupting.narod.ru\Icon_002.ico
- %PROGRAM_FILES%\encrupting.narod.ru\Антивирусы и ключи для них.url
- %PROGRAM_FILES%\encrupting.narod.ru\Icon_001.ico
- %PROGRAM_FILES%\encrupting.narod.ru\Icon_001.ico
- %PROGRAM_FILES%\encrupting.narod.ru\Icon_002.ico
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''