Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\bkcp] 'Startup' = 'SysLogon'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\bkcp] 'DllName' = '%PROGRAM_FILES%\Windows Media Player\Sample Playlists\bkcp.dll'
- Центр обеспечения безопасности (Security Center)
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- firefox.exe
- %PROGRAM_FILES%\Windows Media Player\Sample Playlists\bkcp.dll
- ClassName: 'TfrmSBPrompt' WindowName: 'Spyware Doctor'