Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{6E44887F-5214-41F2-AB46-4728735C4CC6}' = ''
- %ProgramFiles%\Internet Explorer\PLUGINS\systemy.sys
- %ProgramFiles%\Internet Explorer\PLUGINS\system.jmp
- %ProgramFiles%\Internet Explorer\PLUGINS\system.jmp
- ClassName: 'Edit' WindowName: 'shagExe'
- ClassName: 'Edit' WindowName: 'shagDll'