Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'Injection_Service_Install_Start' = '%WINDIR%\Injection_Service_Install_Start.exe'
- %WINDIR%\Injection_Service_Install_Start.exe
- %TEMP%\nso2.tmp\System.dll
- %TEMP%\nso2.tmp\System.dll