Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\AudioSrv] 'ImagePath' = 'net user %username% pepa '
- <SYSTEM32>\shutdown.exe -r -f -t 0
- <SYSTEM32>\reg.exe import %WINDIR%\x.reg
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\zmena_vsetkych_hesiel_restart.bat""
- %TEMP%\1.tmp\zmena_vsetkych_hesiel_restart.bat
- %WINDIR%\x.reg
- %TEMP%\1.tmp\b2e
- %TEMP%\1.tmp\binaries.txt
- %TEMP%\1.tmp\zmena_vsetkych_hesiel_restart.bat
- %TEMP%\1.tmp\b2e.dll
- %TEMP%\1.tmp\binaries.txt
- %TEMP%\1.tmp\b2e