Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'mslivemsn' = '%PROGRAM_FILES%\Windows NT\Accessories\svchost.exe'
- '%PROGRAM_FILES%\Windows NT\Accessories\svchost.exe' "%TEMP%\39.exe"
- '%PROGRAM_FILES%\Windows NT\Accessories\svchost.exe' --kk
- '%TEMP%\39.sfx.exe' -pzx
- '%TEMP%\39.exe'
- %PROGRAM_FILES%\Windows NT\Accessories\svchost.exe
- %TEMP%\39.exe
- %TEMP%\39.sfx.exe
- %TEMP%\39.exe
- ClassName: 'MS_WINHELP' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'