Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] '{d986c6f8-f1db-4839-8286-b9bcb6fdb01b}' = 'addending'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 'addending' = '{d986c6f8-f1db-4839-8286-b9bcb6fdb01b}'
- <SYSTEM32>\kvntckx.dll