Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] 'VIDC.D263' = 'xl_x263dec.dll'
- %TEMP%\<Имя вируса>.avi
- <SYSTEM32>\xl_x263dec.dll
- ClassName: 'WMP9DeskBand' WindowName: 'WMP9DeskBand'
- ClassName: '' WindowName: '(null)'
- ClassName: 'Type32_Main_Window' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ReBarWindow32' WindowName: ''