Техническая информация
- [<HKLM>\SOFTWARE\Classes\ocfile\shell\open\command] '' = 'explorer "%PROGRAM_FILES%\Microsoft\Internat Explorer"'
- расширений файлов
- <SYSTEM32>\cmd.exe /c ""%TEMP%\temp_tmp.bat" "
- <SYSTEM32>\attrib.exe "%PROGRAM_FILES%\Microsoft\Internat Explorer" +s
- %ALLUSERSPROFILE%\Desktop\Internat Explorar.oc
- %TEMP%\nso3.tmp\System.dll
- %TEMP%\temp_tmp.bat
- %TEMP%\nsq2.tmp
- %PROGRAM_FILES%\Microsoft\Internat Explorer\Desktop.ini
- %PROGRAM_FILES%\Microsoft\Internat Explorer\target.lnk
- %TEMP%\nso3.tmp\System.dll