Техническая информация
- [<HKCU>\Control Panel\Desktop] 'SCRNSAVE.EXE' = '"%WINDIR%\Herbst.scr'
- '%WINDIR%\Herbst.scr' /p 65804
- '<SYSTEM32>\rundll32.exe' desk.cpl,InstallScreenSaver "%WINDIR%\Herbst.scr
- %APPDATA%\Microsoft\Windows\Themes\Custom.theme
- %WINDIR%\Herbst.scr
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'