Техническая информация
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\run.bat
- %WINDIR%\Explorer.EXE
- NtCreateSection, драйвер-обработчик: DProEx.sys
- <SYSTEM32>\clk.ini
- <Текущая директория>\DProEx.sys
- %WINDIR%\mpKu.dll
- %WINDIR%\run.bat
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: '' WindowName: 'MsgDebugView'
- ClassName: 'Progman' WindowName: ''
- ClassName: 'SHELLDLL_DefView' WindowName: ''