Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\DiskSystem] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\FileEngine] 'Start' = '00000001'
- <SYSTEM32>\rundll32.exe <SYSTEM32>\halc.dll,LpkEditTextOut %CommonProgramFiles%\Ram.exe
- <SYSTEM32>\rundll32.exe <SYSTEM32>\halc.dll,LpkExtTextIn
- <SYSTEM32>\ipconfig.exe
- <SYSTEM32>\cmd.exe /c <SYSTEM32>\del098.bat
- <SYSTEM32>\hp.sys