Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\ghack.url
- '%WINDIR%\syswow64\taskkill.exe' /f /IM explorer.exe
- %WINDIR%\explorer.exe
- C:\explorerkiller.bat
- C:\startexplorer.bat
- ClassName: '' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' /c ""C:\explorerkiller.bat" "