Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{F9912317-1521-B9B3-8267-424CF58EE5A9}] 'stubpath' = ''
- %WINDIR%.crypted.exe
- %WINDIR%\Explorer.EXE
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\winsa\win.exe
- %APPDATA%\addons.dat
- %WINDIR%.crypted.exe
- %APPDATA%\addons.dat
- %PROGRAM_FILES%\winsa\win.exe
- %WINDIR%.crypted.exe