Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Print\Providers\1461604992] 'Name' = '"%TEMP%\2.tmp"'
- %HOMEPATH%\yet.exe
- %HOMEPATH%\yeu.exe
- %HOMEPATH%\x4Fm93l7k9.exe
- %HOMEPATH%\yes.exe
- <SYSTEM32>\spoolsv.exe
- %TEMP%\1.tmp
- %HOMEPATH%\ficeh.exe
- %WINDIR%\Temp\3.tmp
- %HOMEPATH%\yeu.exe
- %HOMEPATH%\x4Fm93l7k9.exe
- %HOMEPATH%\yes.exe
- %HOMEPATH%\yet.exe
- %TEMP%\2.tmp