Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Autologon' = '<SYSTEM32>\odbcbin\autostartup.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Winlogon] 'Start' = '00000000'
- <SYSTEM32>\odbcbin\mirror\mf3216.dll
- <SYSTEM32>\odbcbin\mirror\mfc40.dll
- <DRIVERS>\winlogon.sys
- %TEMP%\mf3216.dll
- <SYSTEM32>\odbcbin\mirror\mirror.exe
- <SYSTEM32>\odbcbin\autostartup.exe
- %TEMP%\mf3216.dll
- ClassName: 'too1tips_class32' WindowName: 'tooltipswin32'