Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Runtime Help' = '<SYSTEM32>\WinRunHelp.wrh'
- [<HKLM>\SOFTWARE\Classes\Windows Runtime Help 4.881.1208\shell\open\command] '' = '<SYSTEM32>\win32hlp.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'win32hlp' = '<SYSTEM32>\win32hlp.exe'
- <SYSTEM32>\WinRunHelp.wrh
- %TEMP%\~DF301D.tmp
- <SYSTEM32>\w2d7win.exe
- %TEMP%\~DF26C4.tmp
- <SYSTEM32>\temp.tmp
- <SYSTEM32>\win32hlp.exe
- %TEMP%\~DF26C4.tmp
- <SYSTEM32>\temp.tmp
- '<SYSTEM32>\win32hlp.exe'