Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe C:\QuanDD.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = 'Userinit.exe C:\QuanDD.exe'
- [<HKLM>\SOFTWARE\Classes\exefile\shell\open\command] '' = 'notepad.exe'