Техническая информация
- [<HKLM>\Software\Classes\416file\shell\open\command] '' = '%WINDIR%\inf\´òÓ¡»ú.{2227a280-3aea-1069-a2de-08002b30309d}\explore.txt:explore.exe %1'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{10003266-A707-22d2-9CBD-0000F87A469H}] 'StubPath' = '%CommonProgramFiles%\Microsoft Shared\INK\10003266.416'
- %ProgramFiles%\winrar\rarr.txt
- <Текущая директория>\unrar.dll
- %CommonProgramFiles%\360.jpg
- %WINDIR%\inf\В¦=+Г+В·.{2227a280-3aea-1069-a2de-08002b30309d}\kugou.exe
- %CommonProgramFiles%\1.bat
- %ProgramFiles%\winrar\formats\ntfs.bat
- %ProgramFiles%\winrar\formats\hou.txt
- %CommonProgramFiles%\microsoft shared\ink\10003266.416
- %ProgramFiles%\winrar\formats\aay.txt
- %ProgramFiles%\winrar\formats\xinzhu.txt
- %ProgramFiles%\winrar\formats\qq.txt
- %CommonProgramFiles%\microsoft shared\msinfo\win.txt
- %CommonProgramFiles%\1.bat
- %CommonProgramFiles%\360.jpg
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles%\1.bat""' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles%\WinRAR\Formats\ntfs.bat""' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles%\1.bat""
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles%\WinRAR\Formats\ntfs.bat""
- '%WINDIR%\syswow64\cacls.exe' "%WINDIR%\inf\┤≥╙Г╗В·.{2227a280-3aea-1069-a2de-08002b30309d}" /d everyone /e