Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{42C50607-D944-41A9-9B67-720AFBE8C22C}' = ''
- %WINDIR%\regedit.exe /s %TEMP%\jvwogog.reg
- <SYSTEM32>\cmd.exe /c %TEMP%\xcjpg.bat
- Библиотека-обработчик для всех процессов: %WINDIR%\Debug\xmlDown.dll
- %TEMP%\jvwogog.reg
- %TEMP%\xcjpg.bat
- <SYSTEM32>\xmloder.exe
- %WINDIR%\Debug\xmlDown.dll
- %WINDIR%\Debug\xmlDown.dll
- <SYSTEM32>\xmloder.exe
- %TEMP%\jvwogog.reg
- ClassName: 'RegEdit_RegEdit' WindowName: ''