Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\explorer.lnk
- '<SYSTEM32>\wscript.exe' "%TEMP%\RarSFX2\Uninstall.js"
- '<SYSTEM32>\wscript.exe' "%TEMP%\RarSFX0\Uninstall.js"
- '%TEMP%\RarSFX2\JavaEvo.exe'
- '%TEMP%\RarSFX2\javapc.exe'
- '%TEMP%\RarSFX2\explorer.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX2\JEXPJP.bat" "
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\graphics.bat" "
- '%TEMP%\RarSFX0\JavaEx.exe' -pFe09b421Cc423f1dcA781ccBa7F6c
- '%TEMP%\RarSFX1\JavaExpo.exe'
- %TEMP%\RarSFX2\Uninstall.js
- %TEMP%\RarSFX2\JEXPJP.bat
- %TEMP%\RarSFX2\javapc.exe
- C:\ProgramData\Oracle\JavaEvo\JavaEvoPath\javapc.exe
- C:\ProgramData\Windows\explorer.exe
- C:\ProgramData\Oracle\JavaEvo\JavaEvolution.exe
- %TEMP%\RarSFX0\Uninstall.js
- %TEMP%\RarSFX0\JavaEx.exe
- %TEMP%\RarSFX0\graphics.bat
- %TEMP%\RarSFX2\JavaEvo.exe
- %TEMP%\RarSFX2\explorer.exe
- %TEMP%\RarSFX1\JavaExpo.exe
- %TEMP%\RarSFX2\explorer.exe
- %TEMP%\RarSFX0\JavaEx.exe
- %TEMP%\RarSFX0\graphics.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''