Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'optimization_680244' = '%APPDATA%\Биёз\nvsmartmaxapp.exe'
- <SYSTEM32>\yxkey.dll
- %TEMP%\1e74e.tmp
- %TEMP%\1e7eb.tmp
- %APPDATA%\Биёз\nvsmartmaxapp.exe
- %APPDATA%\Биёз\nvsmartmax.dll
- %APPDATA%\Биёз\ling.exe
- %TEMP%\2345_k59918823_desk.exe
- %WINDIR%\Temp\~C093223D.tmp
- %TEMP%\cc_k59918823_103404.exe
- %TEMP%\1e74e.tmp
- %TEMP%\1e7eb.tmp
- '%APPDATA%\Биёз\ling.exe'
- '%TEMP%\2345_k59918823_desk.exe'