Техническая информация
- [<HKCU>\Control Panel\Desktop] 'SCRNSAVE.EXE' = '<SYSTEM32>\ycze.scr'
- <SYSTEM32>\reg.exe add "HKEY_CURRENT_USER\Control Panel\desktop" /v "ScreenSaveActive" /t reg_sz /d 1 /f
- <SYSTEM32>\reg.exe add "HKEY_CURRENT_USER\Control Panel\desktop" /v "ScreenSaveTimeOut" /t reg_sz /d 60 /f
- <SYSTEM32>\reg.exe add "HKEY_CURRENT_USER\Control Panel\desktop" /v "SCRNSAVE.EXE" /t reg_sz /d <SYSTEM32>\ycze.scr /f
- <SYSTEM32>\wscript.exe "<SYSTEM32>\yxfgscr.vbs"
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\yexrscr.bat" "
- <SYSTEM32>\yxfgscr.vbs
- <SYSTEM32>\yexrscr.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''