Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{06CC9EC2-1D11-44D6-9ABD-FF081C262256}' = ''
- 360tray.exe
- %WINDIR%\Fonts\YG9f7cBzPZ.fon
- %WINDIR%\Fonts\yKY54UdeQT3pEaq2.ttf
- <SYSTEM32>\PerfStringBackup.TMP