Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'newfile' = '<SYSTEM32>\spp\tokens\newfile.exe'
- %WINDIR%\syswow64\spp\tokens\newfile.exe
- %WINDIR%\syswow64\spp\tokens\newfile.exe
- ClassName: '' WindowName: 'Äèñïåò÷åð çà äà ÷ Windows'
- ClassName: '' WindowName: 'Çà ïóñê ïðîãðà ììû'
- ClassName: '' WindowName: 'ГЏГіГ±ГЄ'
- ClassName: '' WindowName: 'Ìîé êîìïüþòåð'