Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Klass' = '%WINDIR%\explorer.exe .exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Klass' = '%WINDIR%\Rundll32.exe .exe'
- '%WINDIR%\esplorer.exe'
- [<HKCU>\Software\Microsoft\MessengerService]
- %WINDIR%\vData.txt
- %WINDIR%\esplorer.exe
- %WINDIR%\name
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'