Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hardlock] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Haspnt] 'Start' = '00000002'
- '%WINDIR%\kcrack\Hinstall.exe' /i
- '%WINDIR%\regedit.exe' /s kompas.reg
- '%WINDIR%\regedit.exe' /s dump.reg
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\kcrack\crack.bat" "
- %WINDIR%\inf\hsntcard.inf
- %WINDIR%\inf\aks_mf.inf
- <SYSTEM32>\haspdos.sys
- <DRIVERS>\hardlock.sys
- %WINDIR%\inf\aksusb.inf
- <DRIVERS>\aksusb.sys
- %WINDIR%\inf\hlntcard.inf
- <SYSTEM32>\haspvdd.dll
- %WINDIR%\kcrack\Kompas.reg
- %WINDIR%\kcrack\Dump.reg
- %WINDIR%\kcrack\Crack.bat
- %WINDIR%\kcrack\Rhaspemu.exe
- <DRIVERS>\Haspnt.sys
- <SYSTEM32>\config.hsp
- %WINDIR%\kcrack\Hinstall.exe
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'