Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Live' = '%APPDATA%\Roaming\Windows Live\whrcgfifig.exe'
- <SYSTEM32>\taskhost.exe
- %APPDATA%\Roaming\Windows Live\debug_cache_dump_2384394.dmp
- %TEMP%\apiSoftCA
- %APPDATA%\Roaming\Windows Live\whrcgfifig.exe
- ClassName: 'Indicator' WindowName: ''