Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinHeci32] 'Start' = '00000002'
- %PROGRAM_FILES%\7rar\WinHmut32.exe
- <SYSTEM32>\rundll32.exe newdev.dll,ClientSideInstall \\.\pipe\PNP_Device_Install_Pipe_0.{0606E25C-4408-4DAA-92AC-C49BA5A190F8}
- %PROGRAM_FILES%\7rar\WinHmut32.exe
- 'any':0
- ClassName: 'Shell_TrayWnd' WindowName: ''