Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{478932A2-862F-4A34-A264-54A6EB998FDE}' = ''
- %PROGRAM_FILES%\Internet Explorer\PowerNt.Onz
- %PROGRAM_FILES%\Internet Explorer\PointDn.Qoc
- %PROGRAM_FILES%\Internet Explorer\PointDn.Qoc
- ClassName: 'EXe coed eCls' WindowName: 'EX code awTle'
- ClassName: 'Button' WindowName: 'ZsJn8zP3z'
- ClassName: 'Button' WindowName: 'Zsz8DnPzz'
- ClassName: '' WindowName: 'ZsJn8zP3z'
- ClassName: '' WindowName: 'Zsz8DnPzz'