Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MSN' = '<SYSTEM32>\Msn32.exe'
- <Имя диска съемного носителя>:\GreenWave.doc__________________________________________________________.exe
- Компонент восстановления системы (SR)
- '<SYSTEM32>\shutdown.exe' -s
- '<SYSTEM32>\cmd.exe' /c shutdown -s
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen C:\Karo$$$$$$$$$$$$$$0o0o0o0o0o0o0o0000$$$$$$$$$$$$$$$$$$$$$bi\Karoobi.jpg
- <SYSTEM32>\Msn32.exe
- C:\Karo$$$$$$$$$$$$$$0o0o0o0o0o0o0o0000$$$$$$$$$$$$$$$$$$$$$bi\Karoobi.jpg
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''