Техническая информация
- [<HKLM>\SOFTWARE\Classes\comfile\shell\open\command] '' = 'EXE %1 %*'
- [<HKLM>\SOFTWARE\Classes\batfile\shell\open\command] '' = 'cmd.exe /k echo Can't Executing Command :p'
- [<HKLM>\SOFTWARE\Classes\exefile\shell\open\command] '' = 'EXE %1 %*'
- [<HKLM>\SOFTWARE\Classes\regfile\shell\open\command] '' = 'wscript.exe %WINDIR%\key.vbs'
- <SYSTEM32>\WINBOOT.eTe
- Редактора реестра (RegEdit)
- '<SYSTEM32>\WINBOOT.eTe'
- '<SYSTEM32>\tskill.exe' system32
- '<SYSTEM32>\tskill.exe' WINBOOT
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoFolderOptions' = '00000001'
- <SYSTEM32>\WINBOOT.eTe
- <SYSTEM32>\WINBOOT.eTe