Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{DC1186FA-25F1-8239-B619-481C2EF2133F}] 'StubPath' = '<SYSTEM32>\1a4e5cc.exe'
- %APPDATA%\Microsoft\Windows\Explorer\Shortcut to startup_local.lnk
- <SYSTEM32>\ffffz0320001805EB.tmp
- <SYSTEM32>\ffffz0320001803.tmp
- <SYSTEM32>\ffffz0320001805EB.tmp
- <SYSTEM32>\ffffz0320001803.tmp