Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '%TEMP%\svchosts.exe'
- '%TEMP%\svchosts.exe'
- '<SYSTEM32>\wermgr.exe' -queuereporting
- %TEMP%\svchosts.exe
- ClassName: '(null)' WindowName: '???????? ???????'
- ClassName: '(null)' WindowName: '????????? ???????'
- ClassName: '(null)' WindowName: '????????? ????? Windows'
- ClassName: '(null)' WindowName: 'Windows Task Manager'