Техническая информация
- [<HKCU>\Control Panel\Desktop] 'SCRNSAVE.EXE' = '<SYSTEM32>\REVEAL.SCR'
- '<SYSTEM32>\rundll32.exe' USER32.DLL,UpdatePerUserSystemParameters ,1 ,True
- %TEMP%\aut2.tmp
- <SYSTEM32>\REVEAL.SCR
- %WINDIR%\REVEAL.BMP
- %PROGRAM_FILES%\l_w_r.log
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'