Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Winlogon' = '%WINDIR%\Winmain\winlogon.exe'
- Средство контроля пользовательских учетных записей (UAC)
- %WINDIR%\Winmain\winlogon.exe
- [<HKCU>\Software\yahoo\pager]
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: 'Process Monitor - sysinternals: www.sysinternals.com'
- ClassName: 'gdkWindowToplevel' WindowName: ''
- ClassName: '' WindowName: 'Yahoo! Messenger'
- %WINDIR%\Temp\logo.txt
- %WINDIR%\Winmain\winlogon.exe
- %WINDIR%\1.jpg
- %WINDIR%\Winmain\winlogon.exe
- %TEMP%\~DFBB34.tmp
- ClassName: '18467-41' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'PROCEXPL' WindowName: ''
- ClassName: 'TCPViewClass' WindowName: 'TCPView - Sysinternals: www.sysinternals.com'
- ClassName: 'PortmonClass' WindowName: ''