Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{8FF71D28-9FC0-4D5D-9FF1-6E24F96DE4B7}' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] '%WINDIR%\fonts\hifkqpen.dll' = '{8FF71D28-9FC0-4D5D-9FF1-6E24F96DE4B7}'
- <SYSTEM32>\regsvr32.exe /s "%WINDIR%\fonts\hifkqpen.dll"
- Библиотека-обработчик для всех процессов: %WINDIR%\fonts\hifkqpen.dll
- %WINDIR%\Fonts\gbmy01.nls
- %WINDIR%\Fonts\hifkqpen.tmp