Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Winlogon' = '%WINDIR%\Winmain\winlogon.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- Средство контроля пользовательских учетных записей (UAC)
- %WINDIR%\Winmain\winlogon.exe
- [<HKCU>\Software\yahoo\pager]
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: 'Process Monitor - sysinternals: www.sysinternals.com'
- ClassName: 'gdkWindowToplevel' WindowName: ''
- ClassName: '' WindowName: 'Yahoo! Messenger'
- %WINDIR%\Temp\2055488844Rc45d.txt
- %WINDIR%\Winmain\winlogon.exe
- %WINDIR%\Winmain\winlogon.exe
- %TEMP%\~DFA577.tmp
- ClassName: '18467-41' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'PROCEXPL' WindowName: ''
- ClassName: 'TCPViewClass' WindowName: 'TCPView - Sysinternals: www.sysinternals.com'
- ClassName: 'PortmonClass' WindowName: ''