Техническая информация
- %WINDIR%\winlogon.exe
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler C:\Archivos de programa\Windows NT\acces dial.exe
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler C:\Documents and settings\svchost.exe
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler %WINDIR%\winlogon.exe
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler %WINDIR%\temp\Actfile.exe
- [<HKCU>\Software\Microsoft\MessengerService]
- %WINDIR%\Temp\Actfile.exe
- C:\Documents and Settings\svchost.exe
- %WINDIR%\winlogon.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''