Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\ .lnk
- '%TEMP%\calc.exe'
- ClassName: 'OLLYDBG' WindowName: ''
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\Preferred
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\6cf0ce27-ff8f-4641-acfd-d80756162fed
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\63834115293ad9ade1824d87cd9445f3_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\0409ca5892422fa7f542723c98992fad_23ef5514-3059-436f-a4a7-4cefaab20eb1
- %TEMP%\calc.exe
- %TEMP%\2.ico
- %TEMP%\ms3750.tmp
- %TEMP%\IDF.doc
- ClassName: 'WordPadClass' WindowName: ''
- ClassName: 'WispWindowClass' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''