Техническая информация
- [<HKLM>\SOFTWARE\Classes\txtfile\shell\open\command] '' = '<SYSTEM32>\~~.exe %1'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'qqmall' = '<SYSTEM32>\qqmall.exe'
- %PROGRAM_FILES%\1.exe
- <SYSTEM32>\~~.exe
- <SYSTEM32>\qqmall.exe
- %PROGRAM_FILES%\1.exe
- <SYSTEM32>\~~.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''