Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Hot Celebrity Sex.lnk
- %HOMEPATH%\Start Menu\Programs\Startup\Miley Cyrus Nude Pics.lnk
- '%TEMP%\RarSFX0\play.exe' urlshortcut "http://po###ube1.xxx/niches/celebrities" "~$folder.favorites$\Links" "Hot Celebrity Porn"
- '%TEMP%\RarSFX0\play.exe' urlshortcut "http://www.ce#####tytubeporn.com/" "~$folder.favorites$\Links" "Celebritytubeporn.com"
- 'C:\miley.exe'
- '%TEMP%\RarSFX0\play.exe' urlshortcut "http://www.ce#####tytubeporn.com/" "~$folder.desktop$" "Celebritytubeporn.com"
- '%TEMP%\RarSFX0\play.exe' shortcut "c:\miley.exe" "~$folder.programs$\Startup" "Miley Cyrus Nude Pics"
- '%TEMP%\RarSFX0\play.exe' shortcut "c:\runme.bat" "~$folder.programs$\Startup" "Hot Celebrity Sex"
- '%TEMP%\RarSFX0\play.exe' urlshortcut "http://po###ube1.xxx/niches/celebrities" "~$folder.desktop$" "Hot Celebrity Porn"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\miley.bat" "
- %HOMEPATH%\Desktop\Celebritytubeporn.com.url
- %HOMEPATH%\Desktop\Hot Celebrity Porn.url
- %HOMEPATH%\Favorites\Links\Hot Celebrity Porn.url
- %TEMP%\WE CAN'T STOP.MP3
- %HOMEPATH%\Favorites\Links\Celebritytubeporn.com.url
- C:\runme.bat
- %TEMP%\RarSFX0\miley.exe
- %TEMP%\RarSFX0\miley.bat
- %TEMP%\RarSFX0\play.exe
- C:\miley.exe
- %TEMP%\RarSFX0\runme.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''