Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Svchost.exe' = '%PROGRAM_FILES%\WinRAR\WinRAR.exe -hide'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'cmd.exe' = 'cmd.exe -hide'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Svchost.exe' = ' -hide'
- C:\output1.txt
- %WINDIR%\shell.exe