Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{E3F426F6-8634-42A5-A29E-BC694A88FB7D}' = 'Extr rising hook MHTX000'
- %WINDIR%\Explorer.EXE
- ClassName: 'AVP.AlertDialog' WindowName: ''
- ClassName: 'AVP.Product_Notification' WindowName: ''
- <SYSTEM32>\xyupri0.dll