Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MsPolicies' = '%WINDIR%\MsPolicies.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MsPolicies' = '<SYSTEM32>\MsPolicies.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SysExp' = '<SYSTEM32>\SysExp.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MsPolicies' = '<Текущая директория>\MsPolicies.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinPoll' = '%WINDIR%\WinPoll.exe'
- '<Текущая директория>\MsPolicies.exe'
- '<SYSTEM32>\SysExp.exe'
- '%WINDIR%\WinPoll.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'Proxyserver' = '127.0.0.1:80'
- <Текущая директория>\MsPolicies.exe
- <SYSTEM32>\SysExp.exe
- <SYSTEM32>\MsPolicies.exe
- %WINDIR%\MsPolicies.exe
- %WINDIR%\WinPoll.exe
- <SYSTEM32>\NTVBSvcW.tlb
- <SYSTEM32>\NTVBSvcW.odl
- <SYSTEM32>\WINTYPE1.ODL
- <SYSTEM32>\Service.RES