Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MobileOptionPack' = '%HOMEPATH%\My Documents\MobileOptionPack\MobileOptionPack.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'MobileOptionPack' = '%HOMEPATH%\My Documents\MobileOptionPack\MobileOptionPack.exe'
- <SYSTEM32>\netsh.exe firewall add allowedprogram program="<SYSTEM32>\svchost.exe" name="Windows Update" mode=ENABLE scope=ALL profile=ALL
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\My Documents\MobileOptionPack\MobileOptionPack.exe