Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ProtDisk' = '%PROGRAM_FILES%\ProtDisk\ProtDisk.exe /Start'
- [<HKLM>\SYSTEM\ControlSet001\Services\ProtDisk] 'Start' = '00000002'
- '%PROGRAM_FILES%\ProtDisk\ProtDisk.exe' /ins
- %TEMP%\E_N4\eCalc.fne
- <DRIVERS>\ProtDisk.sys
- %TEMP%\E_N4\krnln.fnr
- %PROGRAM_FILES%\ProtDisk\ProtDisk.exe
- %PROGRAM_FILES%\ProtDisk\ProtDisk.sys
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'