Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\darkness] 'Start' = '00000002'
- %WINDIR%\system\dwm.exe /start
- <SYSTEM32>\sc.exe delete darkness
- %ALLUSERSPROFILE%\Desktop:$SS_DESCRIPTOR_SBXNV9VVGV1BFS6YK09F6LTYMVLTYKV174LBYNFFSVF7JBCVP4GV
- %WINDIR%\system\dwm.exe
- C:\Documents and Settings\LocalService\Application Data\DYA_NSESNRDNCRBMKGFFN\1.0.0\Data\dya.dat
- %ALLUSERSPROFILE%\Application Data\DYA_NSESNRDNCRBMKGFFN\1.0.0:$SS_DESCRIPTOR_SBXNV9VVGV1BFS6YK09F6LTYMVLTYKV174LBYNFFSVF7JBCVP4GV
- %ALLUSERSPROFILE%\Application Data\DYA_NSESNRDNCRBMKGFFN\1.0.0\Data\app.dat
- %ALLUSERSPROFILE%\Application Data\DYA_NSESNRDNCRBMKGFFN\1.0.0\Data\updates.dat
- %APPDATA%\DYA_NSESNRDNCRBMKGFFN\1.0.0\Data\dya.dat