Техническая информация
- %TEMP%\rarsfx0\idmreg.exe
- %TEMP%\rarsfx0\idm complete by nasro.exe
- %TEMP%\rarsfx1\idmreg.reg
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%TEMP%\rarsfx0\idm complete by nasro.exe' /s
- '%TEMP%\rarsfx0\idmreg.exe' /s
- '%WINDIR%\syswow64\regedit.exe' "%TEMP%\RarSFX1\idmreg.reg"