Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'mydoc' = '"%PROGRAM_FILES%\Messenger\msseces.exe"'
- '%PROGRAM_FILES%\Messenger\msseces.exe' explorer.exe coshelp.dll
- %PROGRAM_FILES%\Messenger\48.dll
- %PROGRAM_FILES%\Messenger\47.exe
- %TEMP%\nsb2.tmp
- %TEMP%\nsg3.tmp\System.dll
- %TEMP%\nsg3.tmp\System.dll
- %PROGRAM_FILES%\Messenger\47.exe в %PROGRAM_FILES%\Messenger\msseces.exe
- %PROGRAM_FILES%\Messenger\48.dll в %PROGRAM_FILES%\Messenger\coshelp.dll