Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Splash_On' = 'bootcfg /addsw /ng /id 1'
- [<HKLM>\SYSTEM\ControlSet001\Control\Session Manager] 'BootExecute' = ''
- '%TEMP%\1.tmp\sleep.exe' 5
- '%TEMP%\1.tmp\messagebox.exe' /C:Check Disk Setup /W:30 /T:259 /M: This Function Requires A System Restart To Finish The Process. \nThe Process After Restart May Take From 30 Minutes To Several Hours.\n\n Restart Now (YES) Restart Later (NO)
- '%WINDIR%\regedit.exe' /s RunOnce.reg
- '<SYSTEM32>\wscript.exe' Restart.vbs
- '<SYSTEM32>\chkdsk.exe' C: /r
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\SOCheckDisk_V3.bat" "
- '<SYSTEM32>\bootcfg.exe' /rmsw /ng /id 1
- %TEMP%\1.tmp\Restart.vbs
- %TEMP%\1.tmp\sleep.exe
- %TEMP%\1.tmp\messagebox.exe
- %TEMP%\1.tmp\SOCheckDisk_V3.bat
- %TEMP%\1.tmp\RunOnce.reg
- %TEMP%\1.tmp\sleep.exe
- %TEMP%\1.tmp\SOCheckDisk_V3.bat
- %TEMP%\1.tmp\Restart.vbs
- %TEMP%\1.tmp\RunOnce.reg
- %TEMP%\1.tmp\messagebox.exe
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'