Техническая информация
- [<HKLM>\Software\Classes\emcClass\shell\open\command] '' = 'rundll32.exe <SYSTEM32>\keymail.dll,OpenDocument %1'
- %TEMP%\dll56ec.tmp
- %TEMP%\dll56ec.tmp.dll
- %WINDIR%\syswow64\set576a.tmp
- %TEMP%\dll56ec.tmp
- %WINDIR%\syswow64\set576a.tmp в %WINDIR%\syswow64\keymail.dll