Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'winxp' = '%WINDIR%\mstsc\Nod32.vbs'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- %WINDIR%\mstsc\mstsc.exe
- <SYSTEM32>\regsvr32.exe /s "%WINDIR%\mstsc\msinet.ocx"
- <SYSTEM32>\wscript.exe "%WINDIR%\mstsc\Nod32.vbs"
- %WINDIR%\mstsc\Nod32.vbs
- %WINDIR%\mstsc\MSINET.OCX
- %WINDIR%\mstsc\COMDLG32.OCX
- %WINDIR%\mstsc\mstsc.exe
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''