Техническая информация
- [<HKCU>\Control Panel\Desktop] 'SCRNSAVE.EXE' = '%WINDIR%\FORBID~1.SCR'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'NCLaunch' = '%WINDIR%\NCLAUNCH.EXe'
- <SYSTEM32>\Macromed\Flash\flash.ocx
- %WINDIR%\NCLAUNCH.EXe
- %WINDIR%\NCLAUNCH.EXe
- %WINDIR%\NCUNINST.EXe
- %WINDIR%\Forbidden Siren.scr
- ClassName: 'Indicator' WindowName: ''