Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svcntfy (system)' = 'C:\sys\svcntfy.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'
- '%WINDIR%\regedit.exe' /SC /C C:\sys/fwreg.reg
- '%WINDIR%\regedit.exe' /SC /C C:\sys/reg.reg
- C:\sys\fwreg.reg
- C:\sys\reg.reg
- C:\sys\svcntfy.exe
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'MS_WINHELP' WindowName: '(null)'