Trojan.Siggen17.50798

Техническая информация

Вредоносные функции

Для затруднения выявления своего присутствия в системе

блокирует:

Средство контроля пользовательских учетных записей (UAC)

Запускает на исполнение

'<SYSTEM32>\taskkill.exe' /f /im "iexplore.exe"
'<SYSTEM32>\taskkill.exe' /f /im "chrome.exe"
'<SYSTEM32>\taskkill.exe' /f /im "jp2luncher.exe"
'<SYSTEM32>\taskkill.exe' /f /im "qdownagent.exe"
'<SYSTEM32>\taskkill.exe' /f /im "qdownload_setup.exe"
'<SYSTEM32>\taskkill.exe' /f /im "qdownload_setup.msi"
'<SYSTEM32>\taskkill.exe' /f /im "qdownservice.exe"
'<SYSTEM32>\taskkill.exe' /f /im "qdownupdate.exe"
'<SYSTEM32>\taskkill.exe' /f /im "ExpressService.exe"
'<SYSTEM32>\net.exe' stop "QuickDownload Agent"
'<SYSTEM32>\net.exe' stop "QuickDownload Service"
'<SYSTEM32>\net.exe' stop "QuickDownload Update"
'<SYSTEM32>\net.exe' stop "ExpressService"
'<SYSTEM32>\net.exe' stop "FIDownService"
'<SYSTEM32>\net.exe' stop wuauserv

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\cmd.exe

следующие пользовательские процессы:

iexplore.exe

Изменяет следующие настройки браузера Windows Internet Explorer

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2500' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1803' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1803' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1605' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1209' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1405' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1201' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1004' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1004' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1001' = '00000001'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1001' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1409' = '00000003'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1409' = '00000003'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2101' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2301' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1809' = '00000003'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2200' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2200' = '00000000'

Без разрешения пользователя устанавливает новую стартовую страницу для Windows Internet Explorer.

Изменения в файловой системе

Создает следующие файлы

%TEMP%\8b7d.tmp\8b9d.bat
%TEMP%\8b7d.tmp\priv.ser
%TEMP%\8b7d.tmp\trusted.certs
%TEMP%\8b7d.tmp\preferences.new
%LOCALAPPDATA%\google\chrome\user data\default\preferences.old
%APPDATA%\sun\java\deployment\security\trusted.certs
%LOCALAPPDATA%low\.wt\priv.ser
%HOMEPATH%\appdata\.wt\priv.ser
%LOCALAPPDATA%low\sun\java\deployment\deployment.properties.bak
%APPDATA%\sun\java\deployment\deployment.properties
%WINDIR%\ip.bat
%WINDIR%\ipp.bat
C:\wsus_id_reset.log
%LOCALAPPDATA%low\microsoft\internet explorer\services\search_{0eb91d06-ccab-4326-b40b-cc9ea44f8499}.ico
%LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012022051220220513\index.dat

Удаляет следующие файлы

%TEMP%\8b7d.tmp\priv.ser
%TEMP%\8b7d.tmp\trusted.certs
%TEMP%\8b7d.tmp\preferences.new
%TEMP%\8b7d.tmp\8b9d.bat

Изменяет следующие файлы

%LOCALAPPDATA%\google\chrome\user data\default\preferences
%LOCALAPPDATA%low\sun\java\deployment\deployment.properties

Сетевая активность

Подключается к

'na##r.com':80
'si#####d.cuckoo.co.kr':80
'co##.jquery.com':80
'cu###o.co.kr':80

TCP

Запросы HTTP GET

http://www.na##r.com/favicon.ico
http://si#####d.cuckoo.co.kr/ohs_images/silkroad.jpg
http://si#####d.cuckoo.co.kr/ohs_images/global.jpg
http://si#####d.cuckoo.co.kr/ohs_images/btn-bg1.gif
http://si#####d.cuckoo.co.kr/ohs_images/lightBlue_back.jpg
http://si#####d.cuckoo.co.kr/ohs_images/globalTop.jpg
http://si#####d.cuckoo.co.kr/ohs_images/topLines.gif
http://si#####d.cuckoo.co.kr/blank.html
http://si#####d.cuckoo.co.kr/ohs_images/t.htm
http://si#####d.cuckoo.co.kr/ohs_images/navBarUnderTopTabsBg.gif
http://si#####d.cuckoo.co.kr/ohs_images/people.jpg
http://si#####d.cuckoo.co.kr/ohs_images/FNDSSCORP.gif
http://si#####d.cuckoo.co.kr/ohs_images/headerBg.jpg
http://si#####d.cuckoo.co.kr/ohs_images/t.gif
http://si#####d.cuckoo.co.kr/js/wwws.min.js
http://si#####d.cuckoo.co.kr/ohs_images/oafcoreR121.js
http://si#####d.cuckoo.co.kr/ohs_images/swanEXTN-custom-2_3_6_5-ko-ie-windows.css
http://si#####d.cuckoo.co.kr/ohs_images/Common2_3_6_5.js
http://co##.jquery.com/jquery-latest.min.js
http://si#####d.cuckoo.co.kr/
http://si#####d.cuckoo.co.kr/ohs_images/footerBg.gif
http://si#####d.cuckoo.co.kr/favicon.ico

UDP

DNS ASK si#####d.cuckoo.co.kr
DNS ASK na##r.com
DNS ASK co##.jquery.com
DNS ASK cu###o.co.kr

Другое

Ищет следующие окна

ClassName: '' WindowName: ''
ClassName: 'Static' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebCheckMonitor' WindowName: ''

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /c "%TEMP%\8B7D.tmp\8B9D.bat <Полный путь к файлу>"
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0EB91D06-CCAB-4326-B40B-CC9EA44F8499}" /v "ShowSearchSuggestions" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0EB91D06-CCAB-4326-B40B-CC9EA44F8499}" /v "SuggestionsURL_JSON" /t REG_SZ /d "http://ac.###rch.naver.com/autocomp...
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0EB91D06-CCAB-4326-B40B-CC9EA44F8499}" /v "FaviconURL" /t REG_SZ /d "http://www.na##r.com/favicon.ico" /...
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0EB91D06-CCAB-4326-B40B-CC9EA44F8499}" /v "URL" /t REG_SZ /d "http://se####.naver.com/search.nave...
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0EB91D06-CCAB-4326-B40B-CC9EA44F8499}" /v "DisplayName" /t REG_SZ /d "Naver" /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" /v "ShowSearchSuggestionsGlobal" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" /v "DownloadRetries" /t REG_DWORD /d o /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" /v "DisplayQuickPick" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes" /v "DefaultScope" /t REG_SZ /d "{0EB91D06-CCAB-4326-B40B-CC9EA44F849...
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d "http://si#####d.cuckoo.co.kr" /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International" /v "CpCache" /t REG_BINARY /d e9fd0000 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International" /v "CNum_CpCache" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld" /v "StaleIETldCache" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download" /v "RunInvalidSignatures" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "FullScreen" /t REG_SZ /d no /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "AutoSearch" /t REG_DWORD /d 4 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "EnableSearchPane" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "NscSingleExpand" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "AllowWindowReuse" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Error Dlg Displayed On Every Error" /t REG_SZ /d no /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "NotifyDownloadComplete" /t REG_SZ /d yes /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Friendly http errors" /t REG_SZ /d yes /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "SmoothScroll" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\COVISION" /f
'<SYSTEM32>\reg.exe' DELETE "HKLM\SOFTWARE\COVISION" /f
'<SYSTEM32>\net.exe' use /d n
'<SYSTEM32>\net.exe' use /d p
'<SYSTEM32>\net.exe' use /d \\172.10.0.2000\d$
'<SYSTEM32>\net.exe' use /d \\172.10.0.2000\driver
'<SYSTEM32>\timeout.exe' /nobreak /t 3
'<SYSTEM32>\wuauclt.exe' /resetauthorization /detectnow
'<SYSTEM32>\net1.exe' start wuauserv
'<SYSTEM32>\net.exe' start wuauserv
'<SYSTEM32>\reg.exe' DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
'<SYSTEM32>\reg.exe' DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v PingID /f
'<SYSTEM32>\reg.exe' DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v AccountDomainSid /f
'<SYSTEM32>\net1.exe' stop wuauserv
'<SYSTEM32>\find.exe' /i "SusClientId"
'<SYSTEM32>\reg.exe' query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId
'<SYSTEM32>\sc.exe' delete "FIDownService"
'<SYSTEM32>\sc.exe' delete "ExpressService"
'<SYSTEM32>\sc.exe' delete "QuickDownload Service"
'<SYSTEM32>\sc.exe' delete "QuickDownload Agent"
'<SYSTEM32>\sc.exe' delete "QuickDownload Update"
'<SYSTEM32>\net1.exe' stop "FIDownService"
'<SYSTEM32>\net1.exe' stop "ExpressService"
'<SYSTEM32>\net1.exe' stop "QuickDownload Update"
'<SYSTEM32>\net1.exe' stop "QuickDownload Service"
'<SYSTEM32>\net1.exe' stop "QuickDownload Agent"
'<SYSTEM32>\net.exe' use /d \\210.105.131.219\└ⁿ╗Ω╞└
'<SYSTEM32>\net.exe' use /d \\210.105.131.219\erpshare
'<SYSTEM32>\net.exe' use /d "\\172.20.2.200\│╗ ╜║─╡"
'<SYSTEM32>\net.exe' use /d \\172.20.2.200\TEMP
'<SYSTEM32>\net.exe' use /d \\172.10.0.2000\scan
'<SYSTEM32>\net.exe' use /d \\172.10.0.2000\setup
'<SYSTEM32>\reg.exe' delete "HKCU\Software\SnapShot" /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v DontUseDNSLoadBalancing /t reg_binary /d 01000000 /f
'<SYSTEM32>\reg.exe' add "HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main" /v IEWatsonEnabled /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache" /v Persistent /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1809 /t REG_DWORD /d 3 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v "2500" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range2" /v ":Range" /t REG_SZ /d "211.168.177.239" /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range2" /v "http" /t REG_DWORD /d 2 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1" /v ":Range" /t REG_SZ /d "192.168.11.80" /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1" /v "http" /t REG_DWORD /d 2 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cuckoo.domain" /v "http" /t REG_DWORD /d 2 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cuckoo.co.kr" /v "http" /t REG_DWORD /d 2 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData" /v "UserFilter" /t REG_BINARY /d 411f00005308adba04000000be00000001000000040000000c000000ebb23...
'<SYSTEM32>\reg.exe' add "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t reg_dword /d 0 /f
'<SYSTEM32>\find.exe' /i "java\\jre6\\bin\\javaw.exe"
'<SYSTEM32>\cmd.exe' /S /D /c" type "%APPDATA%\..\LocalLow\Sun\Java\Deployment\deployment.properties" "
'<SYSTEM32>\find.exe' /i "grant { permission java.io.FilePermission"
'<SYSTEM32>\find.exe' /i "connect, accept"
'<SYSTEM32>\find.exe' /i "grant { permission java.security.AllPermission; "
'<SYSTEM32>\cmd.exe' /S /D /c" type "%ProgramFiles(x86)%\Java\jre6\lib\security\java.policy" "
'<SYSTEM32>\setx.exe' /m JAVA_HOME "%ProgramFiles(x86)%\java\jre6"
'<SYSTEM32>\reg.exe' delete "HKCU\Environment" /F /V JAVA_TOOL_OPTIONS
'<SYSTEM32>\reg.exe' delete "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /F /V JAVA_TOOL_OPTIONS
'<SYSTEM32>\reg.exe' add "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /reg:64 /v "EnableJavaUpdate" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "SunJavaUpdateSched" /f
'<SYSTEM32>\reg.exe' add "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /reg:64 /v "EnableAutoUpdateCheck" /t REG_DWORD /d 0 /f
'<SYSTEM32>\xcopy.exe' /y priv.ser "%APPDATA%\..\.wt"
'<SYSTEM32>\xcopy.exe' /y priv.ser "%APPDATA%\..\locallow\.wt"
'<SYSTEM32>\xcopy.exe' /y trusted.certs "%APPDATA%\Sun\Java\Deployment\security"
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing" /v PopupsUseNewWindow /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 2301 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 2101 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1409 /t REG_DWORD /d 3 /f
'<SYSTEM32>\reg.exe' DELETE "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Window_Placement" /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v SyncMode5 /t REG_DWORD /d 3 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v "ProxyHttp1.1" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v UrlEncoding /t reg_dword /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter" /v "ShownVerifyBalloon" /t REG_DWORD /d 3 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter" /v "Enabled" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Suggested Sites" /v "Enabled" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow" /v "*.cuckoo.co.kr" /t REG_BINARY /d 00 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows" /v "PopupMgr" /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing" /v "ShortcutBehavior" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing" /v "PopupsUseNewWindow" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing" /v "OpenInForeground" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v 2200 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing" /v "OpenAdjacent" /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 2200 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v 1803 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1803 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1605 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1209 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1405 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1201 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v 1004 /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1004 /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v 1001 /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" /v 1001 /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v 1409 /t REG_DWORD /d 3 /f
'<SYSTEM32>\reg.exe' add "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG" /v "iexplore.exe" /t REG_DWORD /d 0 /f
'%ProgramFiles(x86)%\internet explorer\iexplore.exe' "http://si#####d.cuckoo.co.kr"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней