Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '%WINDIR%\System64\1rfusclient.exe, explorer.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe'
- '%WINDIR%\regedit.exe' /s "%WINDIR%\Zont911\Regedit.reg"
- '%WINDIR%\System64\1rfusclient.exe'
- %WINDIR%\Zont911\Regedit.reg
- %WINDIR%\System64\1rfusclient.exe
- %WINDIR%\System64\1rfusclient.exe
- ClassName: '' WindowName: 'Remote Manipulator System - '
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: '' WindowName: 'Remote Manipulator System - Вопрос'
- ClassName: '' WindowName: 'Remote Manipulator System - Question'
- ClassName: '' WindowName: 'Remote Manipulator System - ??????'