Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinHgvb32] 'Start' = '00000002'
- %PROGRAM_FILES%\7rar\WinHean32.exe
- <SYSTEM32>\rundll32.exe newdev.dll,ClientSideInstall \\.\pipe\PNP_Device_Install_Pipe_0.{30A6471F-4D02-4AA5-B563-9D91DE0DE87E}
- %PROGRAM_FILES%\7rar\WinHean32.exe
- 'any':0
- ClassName: 'Shell_TrayWnd' WindowName: ''