Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ieprotection] 'Logon' = 'StartIEProtect'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ieprotection] 'DllName' = ''
- <SYSTEM32>\wuauclt.exe
- %ALLUSERSPROFILE%\Favorites\Test.dll
- 'yy##.rr.nu':11098
- DNS ASK yy##.rr.nu