Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WangLuGang-Agent' = '%CommonProgramFiles%\System\LanAgent\lanagent.exe'
- '%CommonProgramFiles%\System\LanAgent\KeepProg.exe'
- '%CommonProgramFiles%\System\LanAgent\LanAgent.exe'
- ClassName: 'TXGuiFoundation' WindowName: ''
- %CommonProgramFiles%\System\LanAgent\icall.dll
- %CommonProgramFiles%\System\LanAgent\KeepProg.exe
- %CommonProgramFiles%\System\LanAgent\LanAgent.exe
- %CommonProgramFiles%\System\LanAgent\GetWordNT.dll
- ClassName: 'IMWindowClass' WindowName: ''