Техническая информация
- <SYSTEM32>\tasks\microsoft\windows\autochk\proxy
- [<HKLM>\System\CurrentControlSet\Services\RemoteRegistry] 'Start' = '00000002'
- %LOCALAPPDATA%\safer-networking ltd\spybot 3\spybot3.log
- ClassName: 'FPCMsgWindowCls' WindowName: 'SaferNetworking.Spybot3.AntiBeacon'
- '<SYSTEM32>\svchost.exe' -k regsvc