Техническая информация
- [<HKCU>\Control Panel\Desktop] 'SCRNSAVE.EXE' = '%WINDIR%\clock.scr'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'NCLaunch' = '%WINDIR%\NCLAUNCH.EXe'
- %WINDIR%\NCLAUNCH.EXe
- <SYSTEM32>\rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,1
- %WINDIR%\NCLAUNCH.EXe
- %APPDATA%\Microsoft\Windows\Themes\Custom.theme
- %WINDIR%\NCUNINST.EXe
- <SYSTEM32>\Macromed\Flash\~SS1.tmp
- %WINDIR%\clock.scr
- <SYSTEM32>\Macromed\Flash\~SS1.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''