Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{5DA78CAE-51BC-4A36-85BC-18CC640AAAC9}' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] '%WINDIR%\fonts\igiuptos.dll' = '{5DA78CAE-51BC-4A36-85BC-18CC640AAAC9}'
- <SYSTEM32>\regsvr32.exe /s "%WINDIR%\fonts\igiuptos.dll"
- Библиотека-обработчик для всех процессов: %WINDIR%\fonts\igiuptos.dll
- %WINDIR%\Fonts\GB00017.nls
- %WINDIR%\Fonts\igiuptos.tmp