Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Programm' = '%WINDIR%\toock.exe'
- <SYSTEM32>\reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v Programm /t REG_SZ /d "%WINDIR%\toock.exe" /f
- %WINDIR%\toock.exe
- %WINDIR%\toock.exe
- ClassName: '' WindowName: '???????? ???????'
- ClassName: '' WindowName: '????????? ???????'
- ClassName: 'TaskSwitcherWnd' WindowName: '???????????? ?????'
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Program Manager'
- ClassName: '' WindowName: '???????? ????? Windows'