Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{9D96BF99-3175-4597-926C-1ACDB7E73C13}' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] '%WINDIR%\Fonts\ujltisxt.dll' = '{9D96BF99-3175-4597-926C-1ACDB7E73C13}'
- <SYSTEM32>\regsvr32.exe /s "%WINDIR%\Fonts\ujltisxt.dll"
- Библиотека-обработчик для всех процессов: %WINDIR%\Fonts\ujltisxt.dll
- %WINDIR%\Fonts\GB12331SDK.nls
- %WINDIR%\Fonts\ujltisxt.tmp