Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ctfmone.exe' = '<DRIVERS>\etc\ctfmone.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = 'C:\\WINDOWS\\system32\\userinit.exe,'
- <DRIVERS>\etc\toHdll.dll
- ClassName: '(null)' WindowName: 'AnimalParadise'