Technical Information
- [<HKLM>\SOFTWARE\Classes\ywsfile\shell\open\command] '' = '<SYSTEM32>\УСТжОДКй.exe %1'
- <SYSTEM32>\yytmp1\УСТжОДКй.exe
- <SYSTEM32>\yytmp1\ywsfiletmp.tmp
- <SYSTEM32>\yytmp1\1851544500\yadviser.tmp
- <SYSTEM32>\yytmp1\1851544500\ywsinid
- <SYSTEM32>\yytmp1\1851544500\ywsinid.files\about.txt
- <SYSTEM32>\syys6.3.1.syw
- <SYSTEM32>\yytmp1\1851544500\htmblank.htm
- <SYSTEM32>\yytmp1\1851544500\15447.htm
- <SYSTEM32>\УСТжОДКй.exe
- <SYSTEM32>\opfilejlA
- <SYSTEM32>\opfilejlA
- <SYSTEM32>\yytmp1\ywsfiletmp.tmp
- <SYSTEM32>\yytmp1\1851544500\yadviser.tmp
- <SYSTEM32>\yytmp1\УСТжОДКй.exe
- ClassName: '<Full path to file>' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''