Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{01C52313-FF03-413E-A148-665C199D3279}' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] '%WINDIR%\Fonts\lndgflpn.dll' = '{01C52313-FF03-413E-A148-665C199D3279}'
- <SYSTEM32>\regsvr32.exe /s "%WINDIR%\Fonts\lndgflpn.dll"
- Библиотека-обработчик для всех процессов: %WINDIR%\Fonts\lndgflpn.dll
- %WINDIR%\Fonts\x09119.dat
- %WINDIR%\Fonts\lndgflpn.tmp