Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\41001340] 'Start' = '00000002'
- <SYSTEM32>\appmgmts.dll
- <SYSTEM32>\reg.exe import %TEMP%\r19785418.txt
- <SYSTEM32>\reg.exe export "HKLM\SYSTEM\CurrentControlSet\Control\Keyboard Layouts" %TEMP%\r19785418.txt
- %TEMP%\r19785418.txt
- <SYSTEM32>\41001340.sys
- <SYSTEM32>\61A205E8.tmp
- C:\Documents and Settings\Infotmp.txt
- %TEMP%\61A254D8.log
- C:\Documents and Settings\Infotmp.txt