Техническая информация
- [<HKLM>\SOFTWARE\Classes\ofcfile\shell\open\command] '' = 'explorer "%PROGRAM_FILES%\Microsoft\bin%S\%2Internet Explorar"'
- <SYSTEM32>\cmd.exe /c """%TEMP%\temp_c.bat"" "
- <SYSTEM32>\attrib.exe "%PROGRAM_FILES%\Microsoft\bin1\Internet Explorar" +s
- %WINDIR%\tbgw.ico
- %ALLUSERSPROFILE%\Desktop\Internet Explorar.ofc
- %TEMP%\temp_c.bat
- %ALLUSERSPROFILE%\Desktop\МФ ±¦ Нш №є.lnk
- %PROGRAM_FILES%\Microsoft\bin1\Internet Explorar\Desktop.ini
- %TEMP%\nso2.tmp
- %TEMP%\nsl3.tmp\AccessControl.dll
- %PROGRAM_FILES%\Microsoft\bin1\Internet Explorar\target.lnk
- %TEMP%\nsl3.tmp\AccessControl.dll