Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe volume.exe'
- <SYSTEM32>\volume.exe
- <SYSTEM32>\volume.exe
- %TEMP%\Setup.exe
- <SYSTEM32>\volume.exe
- %TEMP%\Setup.exe
- ClassName: 'TrayNotifyWnd' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '' WindowName: 'Calculator'
- ClassName: 'TrayClockWClass' WindowName: ''
- ClassName: 'BUTTON' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'SHELLDLL_DefView' WindowName: ''
- ClassName: 'Progman' WindowName: ''