Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{8F8C54B0-18CE-40C6-AE72-9182FBE3D569}' = ''
- Библиотека-обработчик для всех процессов: %WINDIR%\debug\userMode\BCA15B.dll
- %WINDIR%\Debug\UserMode\BCA15B.dll
- %WINDIR%\Debug\UserMode\BCA15B.exe
- %WINDIR%\Debug\UserMode\BCA15B.dll
- %WINDIR%\Debug\UserMode\BCA15B.exe