Техническая информация
- '%WINDIR%\del_login.exe' -sys
- '%WINDIR%\del_login.exe' -sec
- '%WINDIR%\del_login.exe' -app
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\1.bat" "
- %WINDIR%\1.bat
- %WINDIR%\del_login.exe
- %WINDIR%\del_login.exe
- <SYSTEM32>\config\SysEvent.Evt
- <SYSTEM32>\config\AppEvent.Evt
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'