Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'X2Skill' = ''
- <SYSTEM32>\reg.exe add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v X2Skill /t REG_EXPAND_SZ /d %systemroot%\system32\svchosts.exe /f
- <SYSTEM32>\svchosts.exe
- ClassName: '' WindowName: 'Windows Task Manager'
- ClassName: 'YahooBuddyMain' WindowName: ''
- ClassName: 'Sword3 Class' WindowName: 'Vo Lam Truyen Ky '
- ClassName: '' WindowName: 'Process Explorer - Sysinternals: www.sysinternals.com'