Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hhh] 'Start' = '00000002'
- '%ALLUSERSPROFILE%\NxVan\NxVan.exe'
- '%TEMP%\exe.exe' ---
- '<SYSTEM32>\msiexec.exe' "-sys"
- <SYSTEM32>\msiexec.exe
- %ALLUSERSPROFILE%\NxVan\ushata
- %ALLUSERSPROFILE%\NxVan\NxVan.exe
- %TEMP%\ushata
- %TEMP%\exe.exe
- %TEMP%\ushata.dll