Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Iman' = '%WINDIR%\Iman.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Ternate' = '<SYSTEM32>\Ternate.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Iseng' = '%WINDIR%\Iseng.exe'
- <Имя диска съемного носителя>:\SetupA.exe
- %WINDIR%\Iman.exe
- C:\SetupA.exe
- <SYSTEM32>\Ternate.exe
- %WINDIR%\Iseng.exe
- %WINDIR%\Nami.exe