Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{1F0E44DE-A300-4081-A69A-D5327167156A}' = ''
- %PROGRAM_FILES%\Internet Explorer\SysNetMe.Sys
- %PROGRAM_FILES%\Internet Explorer\Unix_Se.Jmp
- %PROGRAM_FILES%\Internet Explorer\Unix_Se.Jmp
- ClassName: 'EXe coed eCls' WindowName: 'EX code awTle'
- ClassName: 'Button' WindowName: 'oJUntx3r'
- ClassName: 'Button' WindowName: 'Po8nx2zx'
- ClassName: '' WindowName: 'oJUntx3r'
- ClassName: '' WindowName: 'Po8nx2zx'