Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f92B23AB-gZVj-FEjY-EeWu-0000F87A469H}] 'StubPath' = '%APPDATA%\xg5U7U\SWmpMm.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\svchost.exe
- %APPDATA%\xg5U7U\LiveUDHelper.dll
- %WINDIR%\Fonts\HanQiuSheng.ttf
- %APPDATA%\xg5U7U\SWmpMm.exe
- %WINDIR%\Fonts\RunQiu.ttf
- %WINDIR%\Fonts\RQID.ttf