Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'shell' = 'explorer.exe'
- '<SYSTEM32>\regsvr32.exe' /u traycls.dll
- '<SYSTEM32>\regsvr32.exe' /u niyojan.ocx
- '<SYSTEM32>\regsvr32.exe' /u ABMaster.olb
- '<SYSTEM32>\regsvr32.exe' /u msmic32.ocx
- '<SYSTEM32>\regsvr32.exe' /u osm.ocx
- '<SYSTEM32>\regsvr32.exe' /u guilib32.dll
- %WINDIR%\nolock.ini
- %WINDIR%\norun.ini
- ClassName: 'Shell_TrayWnd' WindowName: ''