Техническая информация
- <SYSTEM32>\gpupdate.exe /force
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\nc.bat" "
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments] 'SaveZoneInformation' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Associations] 'LowRiskFileTypes' = '*.bat'
- %HOMEPATH%\ntuser.pol
- %TEMP%\1.tmp\nc.bat