Техническая информация
- %TEMP%\rarsfx0\myhome.bat
- %TEMP%\defopen.reg
- %TEMP%\defopen.reg
- %TEMP%\rarsfx0\myhome.bat
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\MyHome.bat" /VERYSILENT /SP- /NORESTART"
- '%WINDIR%\syswow64\regedit.exe' /S "%LOCALAPPDATA%\Temp.\DefOpen.reg"