Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\gemlitray] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\gemlitray] 'ImagePath' = '%WINDIR%\semasrv.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\sufficiently] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\sufficiently] 'ImagePath' = '%ProgramFiles%\Windows Media Player\sufficient.exe'
- %TEMP%\nsp2.tmp\SimpleSC.dll
- %WINDIR%\semasrv.exe
- %ProgramFiles%\Windows Media Player\sufficient.exe
- %TEMP%\nsp2.tmp\SimpleSC.dll