Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe <SYSTEM32>\mstscss.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Register Manager] 'Start' = '00000002'
- <SYSTEM32>\mstscss.exe
- <SYSTEM32>\mstscss.exe
- '61.##9.47.131':992