Техническая информация
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] 'CTS' = '%WINDIR%\CTS.exe'
- %TEMP%\rqxnqer90eoulut.exe
- %WINDIR%\cts.exe
- %TEMP%\nsh2.tmp\system.dll
- %TEMP%\nsh2.tmp\system.dll
- '%TEMP%\rqxnqer90eoulut.exe'
- '%WINDIR%\cts.exe'