Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\nlsX86cc] 'ImagePath' = '<SYSTEM32>\nlssrv32.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\nlsX86cc] 'Start' = '00000002'
- '<SYSTEM32>\nlssrv32.exe'
- %TEMP%\nsf2.tmp\System.dll
- %TEMP%\nsf2.tmp\UserMgr.dll
- <SYSTEM32>\nlssrv32.exe
- %TEMP%\nsf2.tmp\nsSCM.dll
- <SYSTEM32>\Viveza2FC32.dll
- %TEMP%\nsf2.tmp\UserMgr.dll
- %TEMP%\nsf2.tmp\System.dll
- %TEMP%\nsf2.tmp\nsSCM.dll