Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'Shellmon32' = '%WINDIR%\Shellmon32.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RUNSERVICES] 'Shellmon32' = '%WINDIR%\Shellmon32.exe'
- '%WINDIR%\Shellmon32.exe'
- %WINDIR%\Shellmon32.exe
- %TEMP%\~DF5813.tmp