Техническая информация
- %TEMP%\RarSFX0\4.sfx.exe
- <SYSTEM32>\notepad.exe %TEMP%\RarSFX0\you.txt
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %TEMP%\RarSFX0\you.txt
- %TEMP%\RarSFX0\4.sfx.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''