Техническая информация
- '%WINDIR%\regedit.exe' -ea c:\pass\MailAgent\reg\agent_2.reg "HKEY_CURRENT_USER\software\Mail.Ru\Agent\magent_logins2"
- '%WINDIR%\regedit.exe' -ea c:\pass\MailAgent\reg\agent.reg "HKEY_CURRENT_USER\software\Mail.Ru\Agent\magent_logins"
- '<SYSTEM32>\xcopy.exe' Mra\Update\ver.txt c:\pass\MailAgent /K /H /G /Q /R /S /Y
- '%WINDIR%\regedit.exe' -ea c:\pass\MailAgent\reg\agent_3.reg "HKEY_CURRENT_USER\software\Mail.Ru\Agent\magent_logins3"
- '%WINDIR%\regedit.exe' -ea c:\pass\reestr.reg "HKEY_CURRENT_USER\Volatile Environment"
- '<SYSTEM32>\chcp.com' 1251
- '<SYSTEM32>\cmd.exe' /c ""<Текущая директория>\cdm.bat" "
- '<SYSTEM32>\taskkill.exe' /F /IM magent.exe /T
- '<SYSTEM32>\attrib.exe' c:\pass +h +s +r
- magent.exe
- C:\pass\Mozilla\key3.db
- C:\pass\Mozilla\signons.sqlite
- C:\pass\Mozilla\cookies.sqlite
- <Текущая директория>\cdm.bat
- C:\pass\reestr.reg
- '94.##0.191.201':25
- '94.##0.191.201':80
- DNS ASK sm##.mail.ru
- DNS ASK www.ma#l.ru
- ClassName: '' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'msctls_updown32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''