Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Host Process' = '%WINDIR%\Fonts\svchost.exe'
- %WINDIR%\Fonts\svchost.exe
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: 'RegMonClass' WindowName: ''
- ClassName: 'FileMonClass' WindowName: ''
- %ALLUSERSPROFILE%\Application Data\TEMP:2615E8F1
- %WINDIR%\Fonts\svchost.exe
- %WINDIR%\Fonts\svchost.exe
- ClassName: 'SunAwtDialog' WindowName: 'Options'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ThunderRT6FormDC' WindowName: 'Shareware Cheater v 3.0'
- ClassName: 'ThunderRT6FormDC' WindowName: ''