Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run] 'notepad2.exe' = 'popuper.exe'
- '<SYSTEM32>\intmonp.exe'
- '%WINDIR%\popuper.exe'
- iexplore.exe
- <SYSTEM32>\intmonp.exe
- %WINDIR%\popuper.exe
- %WINDIR%\sites.ini
- ClassName: '(null)' WindowName: '(null)'