Техническая информация
- [<HKLM>\SOFTWARE\Classes\wcyfile\Shell\Open\Command] '' = '%SystemRoot%\System32\WScript.exe "%1" %*'
- [<HKLM>\SOFTWARE\Classes\cysfile\shell\open\command] '' = 'WScript.exe "%WINDIR%\Administr32.sym" "%1"'
- '<SYSTEM32>\cmd.exe' /c <Текущая директория>\qpg.bat
- '%WINDIR%\regedit.exe' /s c:\RegText140.reg
- <SYSTEM32>\taobao.ico
- C:\RegText140.reg
- <Текущая директория>\qpg.bat
- %PROGRAM_FILES%\Internet Explorer\SIGNUP\iexplore.exe
- %WINDIR%\Administr32.sym
- %WINDIR%\newicon.ico
- %PROGRAM_FILES%\Internet Explorer\MUI\iexplore.exe
- %WINDIR%\Administr32.sym
- C:\RegText140.reg
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'progman' WindowName: 'Program Manager'