Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Show&Tell' = '%WINDIR%\itpower\showtell\set_ecfg.exe ni ni'
- [<HKCU>\Control Panel\Desktop] 'scrnsave.exe' = '%WINDIR%\itpower\showtell\set_ecom.exe'
- %TEMP%\inst_set.log
- \Device\LanmanRedirector\CRNJEUFU*\MAILSLOT\NET\NETLOGON
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'SHELLDLL_DefView' WindowName: ''
- ClassName: 'Progman' WindowName: 'Program Manager'