Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Print\Providers\657487872] 'Name' = '%TEMP%\2.tmp'
- [<HKLM>\SYSTEM\ControlSet001\Services\26a44c80] 'imagepath' = '%WINDIR%\TEMP\3.tmp'
- '%TEMP%\setup1788642176.exe'
- <SYSTEM32>\spoolsv.exe
- %WINDIR%\Temp\3.tmp
- %TEMP%\1.tmp
- %TEMP%\setup1788642176.exe
- %WINDIR%\Temp\3.tmp
- <DRIVERS>\etc\hosts
- %TEMP%\2.tmp
- %TEMP%\2.tmp в %WINDIR%\Temp\5.tmp
- %TEMP%\setup1788642176.exe в %TEMP%\4.tmp
- %TEMP%\1.tmp в %TEMP%\2.tmp