Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Atomic-x27F' = 'F:\AtomicpartF.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Atomic-x27' = '<SYSTEM32>\Atomic-x27.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Atomic-x27C' = 'c:\AtomicpartC.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Atomic-x27G' = 'G:\AtomicpartG.exe'
- <SYSTEM32>\mastoer32.dll
- %WINDIR%\K-set.bmp
- C:\@li-Rno.H.Bmp
- C:\AtomicpartC.exe
- <SYSTEM32>\Atomic-x27.exe
- <SYSTEM32>\Restore\srframe.mmf
- <SYSTEM32>\Restore\srdiag.exe
- <SYSTEM32>\Restore\rstrui.exe