Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00086CF7-19B4-4AEE-AE76-1388C3853323}] 'Exec' = 'http://www.800999.cn'
- [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00086CF7-19B4-4AEE-AE76-1388C3853322}] 'Exec' = 'http://www.tb1680.cn'
- [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00086CF7-19B4-4AEE-AE76-1388C3853321}] 'Exec' = 'http://www.susucha.cn'
- <SYSTEM32>\cmd.exe /c <Текущая директория>\setup.bat
- %WINDIR%\tb1680.ico
- %WINDIR%\800999.ico
- <Текущая директория>\setup.bat
- %HOMEPATH%\Start Menu\Internet Explorer.lnk
- %WINDIR%\susucha.ico
- %TEMP%\~DFE79D.tmp