Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'h102' = '%WINDIR%\system\h102.exe'
- '%WINDIR%\system\h102.exe'
- %TEMP%\aut2.tmp
- %TEMP%\jauipkj
- <SYSTEM32>\l0g.txt
- %TEMP%\aut1.tmp
- %TEMP%\gllzcgs
- %WINDIR%\system\h102.exe
- %TEMP%\aut2.tmp
- %TEMP%\jauipkj
- %TEMP%\aut1.tmp
- %TEMP%\gllzcgs