Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\photo 7849 .bat
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\IMG_09022014_060426.png
- '<SYSTEM32>\shutdown.exe' -c "Fuck Turkey" -s -t 10
- '<SYSTEM32>\cmd.exe' /c ""%ALLUSERSPROFILE%\Start Menu\Programs\Startup\photo 7849 .bat" "
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %ALLUSERSPROFILE%\Start Menu\Programs\Startup\IMG_09022014_060426.png
- %HOMEPATH%\Recent\Startup.lnk
- %HOMEPATH%\Recent\IMG_09022014_060426.lnk
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'