Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'load' = '%WINDIR%\system\load.exe'
- [<HKLM>\SYSTEM\ControlSet001\Control\Session Manager] 'BootExecute' = ''
- '<SYSTEM32>\chkntfs.exe' /x e:
- %WINDIR%\system\load.exe
- %HOMEPATH%\Desktop\QQ.lnk
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'