Техническая информация
- '%WINDIR%\sleep.exe' 1000
- '%WINDIR%\NOTEPAD.EXE'
- '<SYSTEM32>\cmd.exe' /c %HOMEPATH%\Local Settings\Tempspread.bat
- %WINDIR%\NOTEPAD.EXE
- [<HKCU>\Software\Yahoo\Pager]
- ClassName: '(null)' WindowName: 'Yahoo! Messenger'
- %HOMEPATH%\Local Settings\Tempspread.bat
- %TEMP%\spread.exe
- %APPDATA%\places.sqlite
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'