Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'x32x' = '%WINDIR%\xwrm.exe'
- %CommonProgramFiles%\Microsoft Shared\DW\jzbyjayay.ara
- %CommonProgramFiles%\Microsoft Shared\DW\briazzzar.iby
- %CommonProgramFiles%\Microsoft Shared\MSInfo\qabijrazy.iya
- %TEMP%\zjzjyz.yjr
- %WINDIR%\xwrm.exe
- C:\Far2\jyzbzbyqq.jby
- %CommonProgramFiles%\Microsoft Shared\DW\briazzzar.iby
- %CommonProgramFiles%\Microsoft Shared\MSInfo\qabijrazy.iya
- %CommonProgramFiles%\Microsoft Shared\DW\jzbyjayay.ara
- %WINDIR%\xwrm.exe
- C:\Far2\jyzbzbyqq.jby