Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\logondll] 'Startup' = 'EventStartup'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\logondll] 'DllName' = 'fly5421.dll'
- '<SYSTEM32>\regsvr32.exe' /s <SYSTEM32>\flyplug.dll
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\fly5421.dll
- <SYSTEM32>\dllcache\fly5421.dll
- <SYSTEM32>\flymain.dll
- <SYSTEM32>\flyplug.dll