Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Print\Providers\88cc9864] 'Name' = '%TEMP%\espA5FC.tmp'
- [<HKLM>\SYSTEM\ControlSet002\Services\xyaorfs] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\xyaorfs] 'Start' = '00000001'
- <SYSTEM32>\spoolsv.exe
- ClassName: '____AVP.Root' WindowName: '(null)'
- <DRIVERS>\xyaorfs.sys
- %TEMP%\sysCB2C.tmp
- %TEMP%\espA5FC.tmp
- %TEMP%\sysCB2C.tmp
- %TEMP%\espA5FC.tmp