Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '输入法补丁' = '%WINDIR%\internatr.exe'
- '<SYSTEM32>\cacls.exe' %WINDIR%\internatt.exe /e /t /p everyone:r
- '<SYSTEM32>\attrib.exe' %WINDIR%\internatr.exe +r +h +s
- %WINDIR%\internatr.exe
- %TEMP%\aut1.tmp
- %WINDIR%\internatr.exe
- %TEMP%\aut1.tmp