Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 'Txtilexc' = '{D2D738AB-6231-47DA-99E7-5FE9AA08556B}'
- <SYSTEM32>\chmibav\catokzip\dlgowvba.dll
- <SYSTEM32>\tabormic.dll
- %TEMP%\_is136703.ini
- <SYSTEM32>\zipibavi.dll
- <SYSTEM32>\micindll.dll
- %TEMP%\UUU2.tmp
- %TEMP%\UUU1.tmp
- %TEMP%\UUU3.tmp
- <SYSTEM32>\extihusb32.dll
- %TEMP%\UUU3.tmp
- %TEMP%\_is136703.ini
- %TEMP%\UUU1.tmp
- %TEMP%\UUU2.tmp