Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '%APPDATA%\Microsoft\Windows\Good\1svnhost.exe, explorer.exe'
- '%APPDATA%\Microsoft\Windows\Good\1svnhost.exe'
- '%WINDIR%\regedit.exe' /s "%APPDATA%\Microsoft\Regedit.reg"
- %APPDATA%\Microsoft\Regedit.reg
- %APPDATA%\Microsoft\Windows\Good\1svnhost.exe
- %APPDATA%\Microsoft\open.bat
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: '' WindowName: 'Remote Manipulator System - '