Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1FreshZone' = '"%ProgramFiles%\Internet Explorer\iexplore.exe" "https://goo.gl/4iesJe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2FreshZone' = '"%ProgramFiles%\Internet Explorer\iexplore.exe" "https://goo.gl/wXDxmR"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3FreshZone' = '"%ProgramFiles%\Internet Explorer\iexplore.exe" "https://goo.gl/QC8Xu3"'
- %TEMP%\7ZipSfx.000\#1InternetFreshZone.lnk
- %TEMP%\7ZipSfx.000\#2InternetFreshZone.lnk
- %TEMP%\7ZipSfx.000\FreshZone.ico
- %TEMP%\7ZipSfx.000\HKCR.reg
- %TEMP%\7ZipSfx.000\run.cmd
- %TEMP%\7ZipSfx.000\run.reg
- %ALLUSERSPROFILE%\FreshZone.ico
- %TEMP%\7ZipSfx.000\#1InternetFreshZone.lnk
- %TEMP%\7ZipSfx.000\#2InternetFreshZone.lnk
- %TEMP%\7ZipSfx.000\FreshZone.ico
- %TEMP%\7ZipSfx.000\HKCR.reg
- %TEMP%\7ZipSfx.000\run.cmd
- %TEMP%\7ZipSfx.000\run.reg
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%WINDIR%\regedit.exe' /S HKCR.reg
- '<SYSTEM32>\cmd.exe' /c copy FreshZone.ico "%ALLUSERSPROFILE%" /Y
- '<SYSTEM32>\cmd.exe' /c copy #2InternetFreshZone.lnk "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp" /Y
- '<SYSTEM32>\cmd.exe' /c copy #1InternetFreshZone.lnk "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\StartUp" /Y
- '%WINDIR%\regedit.exe' /S run.reg