Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sdpblb32] 'Startup' = 'S'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sdpblb32] 'DLLName' = 'sdpblb32.dll'
- <SYSTEM32>\ntvdm.exe -f -i1
- %TEMP%\7794ca92.exe
- %WINDIR%\Temp\scs1.tmp
- %WINDIR%\Temp\scs2.tmp
- <SYSTEM32>\b064572f.dll
- <SYSTEM32>\3fd26e99.dll
- <SYSTEM32>\sdpblb32.dll
- <SYSTEM32>\456278c0.dll
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-9e4.9e8.380001'