Техническая информация
- [<HKLM>\SOFTWARE\Classes\MSProgramGroup\Shell\Open\Command] '' = '<SYSTEM32>\grpconv.exe %1'
- %TEMP%\RarSFX0\sct10en.exe /q
- <SYSTEM32>\grpconv.exe -o
- %TEMP%\IXP000.TMP\w95inf32.dll
- %TEMP%\IXP000.TMP\w95inf16.dll
- %PROGRAM_FILES%\Microsoft Windows Script\Windows Script Control\SET3.tmp
- %PROGRAM_FILES%\Microsoft Windows Script\Windows Script Control\SET5.tmp
- %PROGRAM_FILES%\Microsoft Windows Script\Windows Script Control\SET4.tmp
- %TEMP%\IXP000.TMP\sct10en.inf
- %TEMP%\IXP000.TMP\advpack.dll
- %TEMP%\RarSFX0\sct10en.exe
- %TEMP%\IXP000.TMP\msscript.cnt
- %TEMP%\IXP000.TMP\msscript.ocx
- %TEMP%\IXP000.TMP\msscript.hlp
- %TEMP%\IXP000.TMP\msscript.cnt
- %TEMP%\IXP000.TMP\msscript.hlp
- %TEMP%\RarSFX0\sct10en.exe
- %TEMP%\IXP000.TMP\advpack.dll
- %TEMP%\IXP000.TMP\w95inf16.dll
- %TEMP%\IXP000.TMP\w95inf32.dll
- %TEMP%\IXP000.TMP\msscript.ocx
- %TEMP%\IXP000.TMP\sct10en.inf
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''