Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msimn.exe] 'Debugger' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe] 'Debugger' = 'Worm.Beater_DiA/rrlf'
- <SYSTEM32>\btr.exe
- <SYSTEM32>\btr.exe