Техническая информация
- '<SYSTEM32>\taskkill.exe' /F /IM OneDrive.exe
- '<SYSTEM32>\taskkill.exe' /F /IM explorer.exe
- %WINDIR%\explorer.exe
- %HOMEPATH%\desktop\ituneshelpunavailable.htm
- %HOMEPATH%\desktop\browse.html
- %HOMEPATH%\desktop\alert.htm
- ClassName: '' WindowName: ''
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Proxy Desktop' WindowName: ''
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'Media Center Tray Applet' WindowName: ''
- ClassName: '' WindowName: 'View Available Networks'
- ClassName: 'BluetoothNotificationAreaIconWindowClass' WindowName: 'BluetoothNotificationAreaIconWindowClass'
- ClassName: 'BluetoothNotificationAreaIconWindowClass' WindowName: ''
- '<SYSTEM32>\reg.exe' load hku\Default C:\Users\Default\NTUSER.DAT
- '<SYSTEM32>\reg.exe' delete HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v OneDriveSetup /f
- '<SYSTEM32>\reg.exe' unload hku\Default
- '%WINDIR%\explorer.exe'