Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'services' = '<LS_APPDATA>\Cleanup\Cleanup.exe'
- <LS_APPDATA>\Cleanup\Cleanup.exe
- <LS_APPDATA>\Cleanup\services.exe
- %HOMEPATH%\Desktop\komm_predlozhenie.doc
- <LS_APPDATA>\Cleanup\Cleanup.exe
- ClassName: 'WordPadClass' WindowName: ''
- '<LS_APPDATA>\Cleanup\Cleanup.exe'
- '<LS_APPDATA>\Cleanup\services.exe'
- '%ProgramFiles%\Windows NT\Accessories\wordpad.exe' "%HOMEPATH%\Desktop\komm_predlozhenie.doc"