Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MsAudio' = '<SYSTEM32>\explorer.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MsAudio' = '%WINDIR%\MsVM_STI.EXE RunDll32 cmicnfg.cpl,CMICtrlWnd'
- '%WINDIR%\MsVM_STI.EXE'
- <SYSTEM32>\explorer.exe
- %WINDIR%\MsVM_STI.EXE
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'OWL_Window' WindowName: ''
- ClassName: '#32770' WindowName: 'QQ????????'
- ClassName: 'D3D Window' WindowName: 'YB_OnlineClient'
- ClassName: '#32770' WindowName: '????'
- ClassName: 'TSpyMain' WindowName: ''
- ClassName: '' WindowName: 'eXpLoRer'
- ClassName: '' WindowName: 'WinHex'
- ClassName: '' WindowName: 'WPE PRO'
- ClassName: 'TForm1' WindowName: '???????????? ??????(??????)'
- ClassName: 'TFormMain' WindowName: 'Visual Sniffer'