Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{1BD1EAEA-F175-4A0B-BC07-C5555D29239D}' = ''
- %PROGRAM_FILES%\Internet Explorer\SysNetNe.Sys
- %PROGRAM_FILES%\Internet Explorer\Unix_Su.Jmp
- %PROGRAM_FILES%\Internet Explorer\Unix_Su.Jmp
- ClassName: 'EXe coed eCls' WindowName: 'EX code awTle'
- ClassName: 'Button' WindowName: 'NJUnPx3r'
- ClassName: 'Button' WindowName: 'Lo8nP2zx'
- ClassName: '' WindowName: 'NJUnPx3r'
- ClassName: '' WindowName: 'Lo8nP2zx'