Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 'AceExt' = '{35CEC8A3-2BE6-11D2-8773-92E220524150}'
- 'C:\sysret.dat'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\ziptmp.bat
- %WINDIR%\Explorer.EXE
- %WINDIR%\Downloaded Program Files\CxUSBKey.exe
- %TEMP%\ziptmp.bat
- <SYSTEM32>\AceExt32.dll
- C:\sysret.dat
- C:\sysret.sys
- ClassName: 'Shell_TrayWnd' WindowName: ''