Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\_BLOODY_999_.bat
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\BLOODY_999.bat
- '<SYSTEM32>\mode.com' con cols=250 lines=100
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\DO NOT OPEN ITS A VIRUS.bat""
- %TEMP%\1.tmp\DO NOT OPEN ITS A VIRUS.bat
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'