Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'tbtiomh' = '%WINDIR%\tbtiomh.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Overlay Components] 'ImagePath' = '%WINDIR%\mhxxdlw.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Overlay Components] 'Start' = '00000002'
- '%WINDIR%\tbtiomh.exe'
- '%WINDIR%\mhxxdlw.exe' -i
- %WINDIR%\tbtiomh.exe
- %WINDIR%\offun.exe
- %WINDIR%\uid32.key
- %WINDIR%\offnm.ini
- %WINDIR%\wocnm.dat
- %WINDIR%\woc.ver
- %WINDIR%\mhxxdlw.exe
- %WINDIR%\isf.dat
- %WINDIR%\tbtiomh.exe
- %WINDIR%\mhxxdlw.exe