Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Orsxcm Hsgnjojb Fbr] 'Start' = '00000002'
- %TEMP%\і¬ј¶±¶№¦4.28.exe
- %TEMP%\Hxtabuhgp_NET.exe
- <SYSTEM32>\svchost.exe -k netsvcs
- C:\Net-Temp.ini
- %PROGRAM_FILES%\Lkga\Qdemrbipm.bmp
- %TEMP%\SkinH_EL.dll
- C:\NT_Path.jpg
- %TEMP%\і¬ј¶±¶№¦4.28.exe
- %TEMP%\Hxtabuhgp_NET.exe
- C:\2735600.dll
- %TEMP%\SkinH_EL.dll
- C:\Net-Temp.ini
- 'localhost':1035
- ClassName: 'MS_WINHELP' WindowName: ''