Техническая информация
- [<HKLM>\SOFTWARE\Classes\ocfile\shell\open\command] '' = 'explorer "%PROGRAM_FILES%\Microsoft\Internat Explorer"'
- расширений файлов
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\temp_tmp.bat" "
- '<SYSTEM32>\attrib.exe' "%PROGRAM_FILES%\Microsoft\Internat Explorer" +s
- %ALLUSERSPROFILE%\Desktop\Internat Explorar.oc
- %TEMP%\nsr3.tmp\System.dll
- %TEMP%\temp_tmp.bat
- %TEMP%\nsu2.tmp
- %PROGRAM_FILES%\Microsoft\Internat Explorer\Desktop.ini
- %PROGRAM_FILES%\Microsoft\Internat Explorer\target.lnk
- %TEMP%\nsr3.tmp\System.dll