Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = '%HOMEPATH%\IDH do Windows.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\Skype.lnk
- %HOMEPATH%\IDH do Windows.exe
- %TEMP%\dw.log
- %TEMP%\2212A.dmp
- '%HOMEPATH%\IDH do Windows.exe'
- '<SYSTEM32>\schtasks.exe' /Create /SC minute /MO 1 /TN Adobe /TR %HOMEPATH%\IDH do Windows.exe
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 740