Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{754FB7D8-B8FE-4810-B363-A788CD060F1F}' = ''
- %ProgramFiles%\Internet Explorer\PLUGINS\System64.sys
- %ProgramFiles%\Internet Explorer\PLUGINS\system32.jmp
- %ProgramFiles%\Internet Explorer\PLUGINS\system32.jmp
- ClassName: 'Edit' WindowName: 'xxkxxxxjtrj8jok'
- ClassName: 'Edit' WindowName: 'yyyrt8jjjk9bjko'
- ClassName: 'zzz' WindowName: 'xxx'
- ClassName: '' WindowName: 'yyyrt8jjjk9bjko'
- ClassName: '' WindowName: 'xxkxxxxjtrj8jok'