Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\FNIA] 'ImagePath' = '%ProgramFiles%\Ywte\Ewvjt.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\FNIA] 'Start' = '00000002'
- '%TEMP%\g81\spqq2008_build082_setup.exe'
- %ProgramFiles%\Ywte\hozoe\toxos.dll
- %ProgramFiles%\Ywte\hozoe\pat.xml
- %CommonProgramFiles%\System\Ole DB\MSPat.xml
- %ProgramFiles%\Ywte\lemaos.exe
- %TEMP%\g81\setup.ini
- %TEMP%\g81\gTemp.dat
- %ProgramFiles%\Ywte\heneos.exe
- %TEMP%\g81\jTemp.dat
- %ProgramFiles%\Ywte\heneos.exe в %ProgramFiles%\Ywte\Ewvjt.exe
- %ProgramFiles%\Ywte\lemaos.exe в %ProgramFiles%\Ywte\Pxub.exe
- %TEMP%\g81\gTemp.dat в %TEMP%\g81\spqq2008_build082_setup.exe
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''