Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System32' = '"user32.exe" -user'
- %WINDIR%\user32.log
- %HOMEPATH%\Desktop\Polskie dziewczynki .exe
- %WINDIR%\user32.exe
- 'www.di##er.pl':80
- DNS ASK www.di##er.pl
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'