Техническая информация
- '<SYSTEM32>\gpupdate.exe' /force
- '%WINDIR%\regedit.exe' /s %WINDIR%\system\Ghostlu.reg
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'DisplayName' = '技术支持 : Ghost ' 陆'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'Description' = '该区域中包含所有未放在其它区域中的网站'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'DisplayName' = '技术支持 : Ghost ' 陆'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'Description' = '该区域中包含所有未放在其它区域中的网站'
- %WINDIR%\system\Ghostlu.Ghostlu
- %WINDIR%\system\Ghostlu.reg
- %WINDIR%\system\Ghostlu.Ghostlu
- %WINDIR%\system\Ghostlu.reg
- <DRIVERS>\etc\hosts в <DRIVERS>\etc\Ghostlu
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''