Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Bomba' = '%WINDIR%\bomba.exe'
- <SYSTEM32>\reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Bomba" /d "%WINDIR%\bomba.exe" /f
- %WINDIR%\bomba.exe
- %TEMP%\a60405.bat
- %TEMP%\a60405.bat
- %TEMP%\a60405.bat