Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\TianSinl] 'ImagePath' = '<SYSTEM32>\superec.io.sys'
- '<SYSTEM32>\services.exe'
- <SYSTEM32>\services.exe
- <SYSTEM32>\services.exe
- <SYSTEM32>\Speech.dll
- <SYSTEM32>\superec.io.sys
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'crossfire.exe'