Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\fpqframebuf] 'Startup' = 'WLEventStartup'
- %ALLUSERSPROFILE%\Application Data\Microsoft\MSIDL\~EFD2919330603.tmp
- %ALLUSERSPROFILE%\Application Data\Microsoft\MSIDL\~EFD1844530599.tmp
- <SYSTEM32>\Setup\fpqframebuf.dll
- %ALLUSERSPROFILE%\Application Data\Microsoft\MSIDL\~EFD2919330603.tmp
- %ALLUSERSPROFILE%\Application Data\Microsoft\MSIDL\~EFD1844530599.tmp