Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'LiveUpdate' = '%WINDIR%\explore.exe'
- '%WINDIR%\explore.exe'
- '<SYSTEM32>\reg.exe' add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "LiveUpdate" /t REG_SZ /d "%WINDIR%\explore.exe" /f
- %WINDIR%\explore.exe
- ClassName: 'IMWindowClass' WindowName: '(null)'