Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'DvdPlayer' = '<SYSTEM32>\DvdPlayer.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe <SYSTEM32>\DvdPlayer.exe'
- Диспетчера задач (Taskmgr)
- Редактора реестра (RegEdit)
- '<SYSTEM32>\net.exe' stop "mcshield"
- '<SYSTEM32>\taskkill.exe' /f /im NOD32KRN.EXE
- '<SYSTEM32>\taskkill.exe' /f /im NOD32KUI.EXE
- '<SYSTEM32>\net.exe' stop "Norton Antivirus Auto Protect Service"
- %WINDIR%\XXInstall\ps.exe
- <SYSTEM32>\DvdPlayer.exe
- ClassName: '' WindowName: 'Windows Task Manager'
- ClassName: '#32770' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '' WindowName: ''
- '<SYSTEM32>\net1.exe' stop "mcshield"
- '<SYSTEM32>\net1.exe' stop "Norton Antivirus Auto Protect Service"
- '%WINDIR%\XXInstall\ps.exe' /f /im NOD32KRN.EXE