Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HNCC' = '%HOMEPATH%\Desktop\d\RedAlert.exe'
- Диспетчера задач (Taskmgr)
- %HOMEPATH%\desktop\d\del.bat
- %HOMEPATH%\desktop\d\redalert.exe
- ClassName: 'EDIT' WindowName: ''
- '%HOMEPATH%\desktop\d\redalert.exe'