Техническая информация
- '%TEMP%\RarSFX0\Patch.exe' /s
- '%WINDIR%\regedit.exe' /s "2.reg"
- '%WINDIR%\regedit.exe' /s "3.reg"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\Setup.cmd" "
- '%WINDIR%\regedit.exe' /s "1.reg"
- [<HKLM>\SOFTWARE\Microsoft\Office\12.0\User Settings\Outlook_Core\Create\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1400' = '00000003'
- [<HKLM>\SOFTWARE\Microsoft\Office\12.0\User Settings\Outlook_Core\Create\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1C00' = '00000000'
- %TEMP%\RarSFX0\setup.cmd
- %TEMP%\RarSFX0\1.reg
- %PROGRAM_FILES%\Microsoft Office\Office12\ID_00030.DPC
- %TEMP%\RarSFX0\2.reg
- %TEMP%\RarSFX0\3.reg
- %TEMP%\RarSFX0\Patch.exe
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''