Техническая информация
- [<HKLM>\SOFTWARE\Classes\ovfile\shell\open\command] '' = 'explorer %PROGRAM_FILES%\Microsoft\Internat Explorar'
- <SYSTEM32>\cmd.exe /c """%TEMP%\temp_tmp.bat"" "
- <SYSTEM32>\attrib.exe "%PROGRAM_FILES%\Microsoft\Internat Explorar" +s
- %WINDIR%\tbgw.ico
- %TEMP%\nso3.tmp\System.dll
- %ALLUSERSPROFILE%\Desktop\МФ ±¦ Нш №є.lnk
- %TEMP%\temp_tmp.bat
- %HOMEPATH%\Favorites\МФ ±¦ Нш №є.lnk
- %PROGRAM_FILES%\Microsoft\Internat Explorar\Desktop.ini
- %TEMP%\nsb2.tmp
- %PROGRAM_FILES%\Microsoft\Internat Explorar\target.lnk
- %ALLUSERSPROFILE%\Desktop\Internat Explorar.ov
- %TEMP%\nso3.tmp\AccessControl.dll
- %TEMP%\nso3.tmp\System.dll
- %TEMP%\nso3.tmp\AccessControl.dll