Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f92B23AB-PWzD-qtjp-cx3Z-0000F87A469H}] 'StubPath' = '%APPDATA%\ZhYGAc\HjMDlt.exe'
- <SYSTEM32>\svchost.exe
- %WINDIR%\Fonts\RunQiu.ttf
- %WINDIR%\Fonts\RQID.ttf
- %APPDATA%\ZhYGAc\HjMDlt.exe
- %APPDATA%\ZhYGAc\LiveUDHelper.dll
- %WINDIR%\Fonts\HanQiuSheng.ttf
- '<SYSTEM32>\svchost.exe'