Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\.ipnat] 'ImagePath' = '\*'
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\smss.exe
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\{7D718C60-B241-4bcc-97C5-88875550460C}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\{FF1D3D65-8EB9-4347-B8C5-C2EC822C6CC2}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\{76620BB4-6C08-49d2-AE35-480385646585}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\b48dadf8.sys
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\max++.00.x86
- <SYSTEM32>\config\afhhiwgi.sav
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\L\afhhiwgi
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\{B2E11362-D348-4411-A4B4-82673555A60B}
- \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\{49B474EB-92D0-464f-B1DD-1F37AABF9D95}