Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hy5.5] 'ImagePath' = '%TEMP%\R1xXNN2.sys'
- NtOpenProcess, драйвер-обработчик: R1xXNN2.sys
- %TEMP%\R1xXNN2.sys
- %TEMP%\R1xXNN2.sys
- %TEMP%\R1xXNN2.sys
- ClassName: 'SysIPAddress32' WindowName: ''
- ClassName: 'SysTreeView32' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'SysHeader32' WindowName: ''
- ClassName: 'msctls_updown32' WindowName: ''
- ClassName: 'SysDateTimePick32' WindowName: ''
- ClassName: 'ComboBox' WindowName: ''
- ClassName: 'Edit' WindowName: ''
- ClassName: 'BUTTON' WindowName: ''
- ClassName: 'ListBox' WindowName: ''
- ClassName: 'msctls_progress32' WindowName: ''
- ClassName: 'msctls_trackbar32' WindowName: ''