Техническая информация
- [<HKLM>\SOFTWARE\Classes\odfile\shell\open\command] '' = 'explorer /n,"%PROGRAM_FILES%\T%H"'
- [<HKLM>\SOFTWARE\Classes\opfile\shell\open\command] '' = 'explorer /n,"%PROGRAM_FILES%\%H"'
- %TEMP%\nso4.tmp\ns5.tmp c:\0602.bat
- %HOMEPATH%\Templates\kksetup.exe
- %HOMEPATH%\Templates\ba54.exe
- <SYSTEM32>\wbem\wmic.exe userAccount where "Name='%USERNAME%'" get SID /value
- <SYSTEM32>\cmd.exe /c c:\0602.bat
- [<HKCU>\Software\FlashFXP]
- %TEMP%\nsx7.tmp\ioSpecial.ini
- %TEMP%\nso4.tmp\ns5.tmp
- %TEMP%\nso4.tmp\nsExec.dll
- %TEMP%\nsx7.tmp\modern-wizard.bmp
- %TEMP%\tmp9.tmp
- %TEMP%\tmp8.tmp
- %TEMP%\nsx7.tmp\InstallOptions.dll
- %HOMEPATH%\Templates\win175405.txt
- %HOMEPATH%\Templates\winar30.ime
- %TEMP%\nsx2.tmp\System.dll
- %HOMEPATH%\Templates\a.bat
- C:\0602.bat
- %TEMP%\nso4.tmp\System.dll
- %HOMEPATH%\Templates\kksetup.exe
- %TEMP%\tmp8.tmp
- %TEMP%\nsx2.tmp\System.dll
- ClassName: 'Shell_TrayWnd' WindowName: ''