Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f92B23AB-nqti-uAnp-BqNR-0000F87A469H}] 'StubPath' = '%APPDATA%\2Tn44S\n2jW4p.exe'
- <SYSTEM32>\svchost.exe
- %WINDIR%\Fonts\RunQiu.ttf
- %WINDIR%\Fonts\RQID.ttf
- %APPDATA%\2Tn44S\n2jW4p.exe
- %APPDATA%\2Tn44S\LiveUDHelper.dll
- %WINDIR%\Fonts\HanQiuSheng.ttf
- '<SYSTEM32>\svchost.exe'