Техническая информация
- <SYSTEM32>\winlogon.exe
- %WINDIR%\syswow64\ws_socket.dll
- %WINDIR%\temp\rwylog191014170011.log
- %WINDIR%\syswow64\ntprotect.sys
- %WINDIR%\temp\rwyprotect.log
- mailslot\rwyprotectinterface
- ClassName: 'TfrmStLock' WindowName: 'initlock'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''