Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wimo' = '%HOMEPATH%\Install\EXCEL.vbs -rb'
- excel.exe
- %TEMP%\bmw_order.xls
- %HOMEPATH%\install\excel.exe
- %HOMEPATH%\install\excel.vbs
- %HOMEPATH%\install\excel.exe
- '96.#.255.5':3417
- ClassName: 'XLMAIN' WindowName: 'Microsoft Excel (Product Activation Failed) - Book1'
- ClassName: 'XLMAIN' WindowName: ''
- '%WINDIR%\syswow64\wscript.exe' "%HOMEPATH%\Install\EXCEL.vbs"
- '%HOMEPATH%\install\excel.exe'
- '%WINDIR%\syswow64\wscript.exe' "%HOMEPATH%\Install\EXCEL.vbs"' (со скрытым окном)
- '%HOMEPATH%\install\excel.exe' ' (со скрытым окном)
- '%ProgramFiles%\microsoft office\office14\excel.exe' /dde