Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'x32x' = '%WINDIR%\xwrm.exe'
- %CommonProgramFiles%\Microsoft Shared\DW\briazzzar.iby
- %CommonProgramFiles%\Microsoft Shared\MSInfo\qabijrazy.iya
- %PROGRAM_FILES%\FireFox\ibyqyajqi.aqj
- %CommonProgramFiles%\Microsoft Shared\DW\jzbyjayay.ara
- %TEMP%\rybrza.jai
- %WINDIR%\xwrm.exe
- C:\Far2\jyzbzbyqq.jby
- %CommonProgramFiles%\Microsoft Shared\DW\briazzzar.iby
- %CommonProgramFiles%\Microsoft Shared\MSInfo\qabijrazy.iya
- %PROGRAM_FILES%\FireFox\ibyqyajqi.aqj
- %WINDIR%\xwrm.exe
- C:\Far2\jyzbzbyqq.jby
- %CommonProgramFiles%\Microsoft Shared\DW\jzbyjayay.ara