Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'svchost.exe' = '%WINDIR%\muis\svchost.exe'
- %WINDIR%\muis\svchost.exe
- ClassName: '' WindowName: 'Íîâà ÿ ïà ïêà '
- '%WINDIR%\syswow64\explorer.exe' <Current directory>\Íîâà ÿ ГЇГ ГЇГЄГ