Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{4f645220-306d-11d2-995d-00c04f98bbc9}] 'StubPath' = '%WINDIR%\Winpcapture.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe %WINDIR%\Winpcapture.exe'
- %WINDIR%\Winpcapture.exe