Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = '%HOMEPATH%\registration\SystemPropertiesDataExecutionPrevention.exe'
- %HOMEPATH%\registration\systempropertiesdataexecutionprevention.exe
- %TEMP%\dw.log
- %TEMP%\1345c6.dmp
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 384