Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'mydoc' = '"%PROGRAM_FILES%\Messenger\msseces.exe"'
- '%PROGRAM_FILES%\Messenger\msseces.exe' explorer.exe coshelp.dll
- %PROGRAM_FILES%\Messenger\48.exe
- %TEMP%\nsr3.tmp\System.dll
- %TEMP%\nsl2.tmp
- %TEMP%\nsr3.tmp\System.dll
- %PROGRAM_FILES%\Messenger\48.exe в %PROGRAM_FILES%\Messenger\msseces.exe