Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'LoadAppInit_DLLs' = '00000001'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '<SYSTEM32>\pccfmna.dll'
- %WINDIR%\regedit.exe /s "%HOMEPATH%\My Documents\Iterra\T03emp03.reg"
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\pccfmna.dll
- %HOMEPATH%\My Documents\Iterra\T03emp03.reg
- %HOMEPATH%\My Documents\Iterra\0105.tmp
- %HOMEPATH%\My Documents\Iterra\T03emp03.reg
- %HOMEPATH%\My Documents\Iterra\0105.tmp
- ClassName: 'RegEdit_RegEdit' WindowName: ''