Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\W32Time] 'Start' = '00000002'
- C:\1.exe
- <SYSTEM32>\sc.exe config w32time start= auto
- <SYSTEM32>\sc.exe stop w32time
- <SYSTEM32>\taskkill.exe /im rundll32.exe /f
- C:\PerfLogs\RCX1.tmp
- C:\171921.vbs
- C:\kb-162781.tmp
- C:\1.exe
- C:\Unlock.log
- C:\PerfLogs\jA2g6.m
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''