Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\PolicyAgent] 'Start' = '00000002'
- <SYSTEM32>\sc.exe stop PolicyAgent
- <SYSTEM32>\sc.exe start PolicyAgent
- <SYSTEM32>\reg.exe import %WINDIR%\323.mp3
- <SYSTEM32>\sc.exe config PolicyAgent start= auto
- %PROGRAM_FILES%\Len0v0\One.sys
- %PROGRAM_FILES%\Len0v0\One.inf
- %WINDIR%\323.mp3
- %WINDIR%\323.mp3