Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\MagicLinkServer] 'ImagePath' = '"<SYSTEM32>\magic.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\MagicLinkServer] 'Start' = '00000002'
- '<SYSTEM32>\notepad.exe' <SYSTEM32>\newfile.txt
- '<SYSTEM32>\magic.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\magic.exe
- %TEMP%\firstrunmagic.txt
- <SYSTEM32>\sssdda334342.vxd
- <SYSTEM32>\m2syadll.dll
- <SYSTEM32>\newfile.txt
- %TEMP%\firstrunmagic.txt
- ClassName: 'Shell_TrayWnd' WindowName: ''