Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{6096E38F-5AC1-4391-8EC4-75DFA92FB32F}] 'Exec' = 'http://mtv.50004.com/'
- Редактора реестра (RegEdit)
- %WINDIR%\syswow64\50004.bat
- %WINDIR%\syswow64\50004.ico
- %WINDIR%\syswow64\50004.reg
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' /c ""<SYSTEM32>\50004.bat" "
- '%WINDIR%\syswow64\regedit.exe' /s 50004.reg