Техническая информация
- [<HKLM>\SOFTWARE\Classes\.ghi\shell\open\command] '' = '%PROGRAM_FILES%\lvegned\sysinit.exe'
- %PROGRAM_FILES%\lvegned\scvhost.exe
- %PROGRAM_FILES%\lvegned\sstatic.exe
- %TEMP%\is-VF8JO.tmp\is-28PDS.tmp /SL4 $200AA "<Полный путь к вирусу>" 81514 52224
- %PROGRAM_FILES%\lvegned\is-7NN7G.tmp
- %PROGRAM_FILES%\lvegned\is-PL6V5.tmp
- %PROGRAM_FILES%\lvegned\is-EA03H.tmp
- %PROGRAM_FILES%\iedw.ghi
- %PROGRAM_FILES%\lvegned\unins000.dat
- %PROGRAM_FILES%\lvegned\is-8UM8C.tmp
- %TEMP%\is-3REVD.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-3REVD.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-VF8JO.tmp\is-28PDS.tmp
- %PROGRAM_FILES%\lvegned\is-DRAFS.tmp
- %PROGRAM_FILES%\lvegned\is-01DAC.tmp
- %PROGRAM_FILES%\lvegned\is-I4UBH.tmp
- %TEMP%\is-3REVD.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-3REVD.tmp\_isetup\_RegDLL.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''