Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{93F48290-F2A6-4A5D-A020-746BA6D4FF2B}' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] '%WINDIR%\fonts\cwmwjtth.dll' = '{93F48290-F2A6-4A5D-A020-746BA6D4FF2B}'
- <SYSTEM32>\regsvr32.exe /s "%WINDIR%\fonts\cwmwjtth.dll"
- Библиотека-обработчик для всех процессов: %WINDIR%\fonts\cwmwjtth.dll
- %WINDIR%\Fonts\GB00029.nls
- %WINDIR%\Fonts\cwmwjtth.tmp