Техническая информация
- [<HKCU>\Software\Microsoft\Internet Explorer\Extensions\{C1F0024B-8278-4999-B7E6-2718426D9FE6}] 'ClsidExtension' = '{E36884E3-42E9-4A8E-A7F8-6DE700903E5C}'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptimg] 'DllName' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\hidproc] 'Start' = '00000002'
- '%TEMP%\InstCryptimg.exe'
- %TEMP%\CaiF.dll
- %WINDIR%\Debug\bmhrt.log
- %PROGRAM_FILES%\ІЖё»НЁ\uninst.exe
- %PROGRAM_FILES%\ІЖё»НЁ\CaiF.dll
- <SYSTEM32>\cryptimg.dll
- %TEMP%\InstCryptimg.exe
- %TEMP%\nsa2.tmp
- <DRIVERS>\hidproc.sys
- %TEMP%\init.txt
- %TEMP%\CaiF.dll
- %TEMP%\InstCryptimg.exe
- %TEMP%\init.txt