Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'mydoc' = '"%PROGRAM_FILES%\Messenger\msseces.exe"'
- %PROGRAM_FILES%\Messenger\msseces.exe explorer.exe coshelp.dll
- %PROGRAM_FILES%\Messenger\45.dll
- %PROGRAM_FILES%\Messenger\44.exe
- %TEMP%\nsj2.tmp
- %TEMP%\nsy3.tmp\System.dll
- %TEMP%\nsy3.tmp\System.dll
- %PROGRAM_FILES%\Messenger\44.exe в %PROGRAM_FILES%\Messenger\msseces.exe
- %PROGRAM_FILES%\Messenger\45.dll в %PROGRAM_FILES%\Messenger\coshelp.dll