Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'task' = '%HOMEPATH%\Install\EXCEL.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'task' = '%HOMEPATH%\Install\EXCEL.vbs -BN'
- excel.exe
- %TEMP%\amt_rfq.xls
- %HOMEPATH%\install\excel.exe
- %HOMEPATH%\install\excel.vbs
- %HOMEPATH%\install\excel.exe
- ClassName: 'XLMAIN' WindowName: 'Microsoft Excel (Product Activation Failed) - Book1'
- ClassName: 'XLMAIN' WindowName: ''
- '%WINDIR%\syswow64\wscript.exe' "%HOMEPATH%\Install\EXCEL.vbs"
- '%HOMEPATH%\install\excel.exe'
- '%WINDIR%\syswow64\wscript.exe' "%HOMEPATH%\Install\EXCEL.vbs"' (со скрытым окном)
- '%HOMEPATH%\install\excel.exe' ' (со скрытым окном)
- '%ProgramFiles%\microsoft office\office14\excel.exe' /dde