Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\welcome.vbs.lnk
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\explorer.exe' = '%APPDATA%\explorer.exe:*:Enabled:cobain'
- '<SYSTEM32>\netsh.exe' firewall add portopening tcp 45560 "File And printer Sharing"
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\explorer.exe" cobain enable
- %APPDATA%\explorer.exe
- %APPDATA%\epools.txt
- %APPDATA%\start.bat
- %APPDATA%\msvcr110.dll
- %APPDATA%\Task Menager.exe
- %APPDATA%\Start.vbs
- %APPDATA%\config.txt
- %APPDATA%\1.ico
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' "%APPDATA%\Start.vbs"
- '<SYSTEM32>\cmd.exe' /c ""%APPDATA%\start.bat" "