Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'GinaDLL' = 'rpcfap.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{914B076F-8FC6-4452-93C8-D810062C81F9}' = ''
- %WINDIR%\ntcoredlltmp.dll
- %WINDIR%\msimfinst.log
- %WINDIR%\prfexp.dat
- <SYSTEM32>\msieinslog.dat
- %WINDIR%\secupadf.dat
- <SYSTEM32>\oleauto32.dll
- <SYSTEM32>\fileap.ver
- <SYSTEM32>\ntcoredll.dll
- <SYSTEM32>\fileap.dll
- <SYSTEM32>\rpcfap.dll