Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Explorer.lnk
- C:\ProgramData\Windows\Explorer.vbs
- C:\ProgramData\Windows\IE8.exe
- C:\ProgramData\Windows\cpu.bat
- C:\ProgramData\Windows\cpu.vbs
- C:\ProgramData\Windows\Explorer.bat
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' \"C:\\ProgramData\\Windows\\Explorer.vbs\"
- '<SYSTEM32>\cmd.exe' /c \"\"C:\\ProgramData\\Windows\\Explorer.bat\" \"
- '<SYSTEM32>\cmd.exe' /c tasklist /NH /FI \"IMAGENAME eq taskmgr.exe\"
- '<SYSTEM32>\tasklist.exe' /NH /FI \"IMAGENAME eq taskmgr.exe\"