Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{86899D14-95D7-4E22-8AB3-7ACC53076FC9}' = ''
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\WinNt64.Sys
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\WinNt64.Jmp
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\WinNt64.Jmp
- ClassName: 'EXenaoRwClass' WindowName: 'EXsinxTwTitle'
- ClassName: 'Edit' WindowName: 'exxtstut'
- ClassName: 'Edit' WindowName: 'dxltstut'
- ClassName: '' WindowName: 'exxtstut'
- ClassName: '' WindowName: 'dxltstut'