Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'windows update' = '<SYSTEM32>\logonuit.exe'
- [<HKLM>\SOFTWARE\Classes\txtfile\shell\open\command] '' = '<SYSTEM32>\mstinitt.exe %1'
- '<SYSTEM32>\logonuit.exe'
- <SYSTEM32>\logonuit.exe
- <SYSTEM32>\windows.exe
- <SYSTEM32>\mstinitt.exe
- ClassName: '????????' WindowName: '????????'
- ClassName: 'ИХЛАЅГс' WindowName: 'ЅГсЙ±¶ѕ'
- ClassName: 'whboy' WindowName: 'Xleo'
- ClassName: 'W*H*B*O*Y' WindowName: 'Xleo'
- ClassName: 'W* H* B* O* Y' WindowName: 'Xleo'