Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] '{E31004D1-A431-41B8-826F-E902F9D95C81}' = 'Windows DreamScene'
- '%WINDIR%\regedit.exe' /s Dscene.reg
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\Installed.cmd" "
- '%TEMP%\RarSFX0\Movie.exe'
- '%TEMP%\RarSFX0\DS32s.exe'
- '%TEMP%\RarSFX0\DS32se.exe'
- <SYSTEM32>\DreamScene.dll
- %TEMP%\RarSFX0\Dscene.reg
- %WINDIR%\Web\Windows DreamScene\Windows Seven Dreamscene 1440x900.wmv
- <SYSTEM32>\en-us\DreamScene.dll.mui
- %TEMP%\RarSFX0\DS32se.exe
- %TEMP%\RarSFX0\Installed.cmd
- %TEMP%\RarSFX0\win7vista.com • Index page.url
- %TEMP%\RarSFX0\DS32s.exe
- %TEMP%\RarSFX0\Movie.exe
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''