Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{DC1186FA-25F1-8239-B619-481C2EF2133F}] 'StubPath' = '<SYSTEM32>\1a4e5cc.exe'
- <SYSTEM32>\ffffz0320001504R1.tmp
- <SYSTEM32>\ffffz0320001505R2.tmp
- <SYSTEM32>\<Имя вируса>.bin
- <SYSTEM32>\ffffz0320001502.tmp
- <SYSTEM32>\ffffz0320001503EB.tmp
- <SYSTEM32>\ffffz0320001504R1.tmp
- <SYSTEM32>\ffffz0320001505R2.tmp
- <SYSTEM32>\ffffz0320001502.tmp
- <SYSTEM32>\ffffz0320001503EB.tmp