Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{5F09A336-B047-497A-9B38-FA95E1170CA0}' = ''
- Библиотека-обработчик для всех процессов: %WINDIR%\debug\userMode\F77494.dll
- %WINDIR%\Debug\UserMode\F77494.dll
- %WINDIR%\Debug\UserMode\F77494.exe
- %WINDIR%\Debug\UserMode\F77494.dll
- %WINDIR%\Debug\UserMode\F77494.exe