Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{74381DEC-D78B-43E4-BA5D-5244F669EBE4}' = ''
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\UnixSys08.Sys
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\UnixSys32.Jmp
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\UnixSys32.Jmp
- ClassName: 'Edit' WindowName: 'H-Unix-qqqq'
- ClassName: 'EXecoedeCls' WindowName: 'EXcodeawTle'
- ClassName: 'Edit' WindowName: 'Y-Unix-zzzz'
- ClassName: '(null)' WindowName: 'Y-Unix-zzzz'
- ClassName: '(null)' WindowName: 'H-Unix-qqqq'
- ClassName: '123' WindowName: '456'