Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'paltalk' = '%PROGRAM_FILES%\Microsoft Office\update\winupdate.exe /autoRun'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'paltalk' = '\"%PROGRAM_FILES%\Microsoft Office\update\winupdate.exe\"'
- '%PROGRAM_FILES%\%tem%\626900_10.exe'
- '%TEMP%\Setup.exe'
- '%TEMP%\up.exe'
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\update.reg
- %PROGRAM_FILES%\%tem%\626900_10.exe
- %TEMP%\up.exe
- %TEMP%\Setup.exe
- %PROGRAM_FILES%\%tem%\hss.ico
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'