Техническая информация
- %WINDIR%\Tasks\rcxsrv.job
- <SYSTEM32>\schtasks.exe /create /ru system /sc co_minutк /mo 5 /tn rcxsrv /tr %WINDIR%\system\winlogon.exe
- <SYSTEM32>\schtasks.exe /create /ru system /sc minute /mo 5 /tn rcxsrv /tr %WINDIR%\system\winlogon.exe
- <SYSTEM32>\libeax.dll
- %WINDIR%\rcx2.dll
- %WINDIR%\rcx2.tmp
- %PROGRAM_FILES%\Outlook Express\wsock32.dll
- %PROGRAM_FILES%\Messenger\wsock32.dll
- %PROGRAM_FILES%\Internet Explorer\wsock32.dll
- %WINDIR%\system\winlogon.txt2
- %WINDIR%\system\winlogon.txt
- %WINDIR%\cpp.ini
- %WINDIR%\rcx2.txt2
- %WINDIR%\rcx2.txt
- %WINDIR%\system\winlogon.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''