Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\wmpControl] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\wmpControl] 'ImagePath' = '%ProgramFiles%\Windows Media Player\wmpCtrl.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\RPCProcess] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\RPCProcess] 'ImagePath' = '%WINDIR%\rpcproc.exe'
- %WINDIR%\rpcproc.exe
- %ProgramFiles%\Windows Media Player\wmpCtrl.exe
- %TEMP%\nsw2.tmp\InstallOptions.dll
- %TEMP%\nsw2.tmp\ioSpecial.ini
- %TEMP%\nsw2.tmp\modern-wizard.bmp
- %TEMP%\nsw2.tmp\SimpleSC.dll
- ClassName: 'Shell_TrayWnd' WindowName: ''