Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\1] 'Startup' = 'BE7F459EE367406088C7FB7CC7B4AD5F6'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\1] 'DllName' = '<SYSTEM32>\1.tmp'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\1.tmp
- '85.#7.3.251':80
- 85.#7.3.251/