Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MSWORD STARTUP' = '<SYSTEM32>\WINWORD.EXE'
- <SYSTEM32>\cmd.exe
- %HOMEPATH%\Templates\winword2.doc .exe
- <SYSTEM32>\config\systemprofile\Templates\winword.doc .exe
- <SYSTEM32>\config\systemprofile\Templates\winword2.doc .exe
- %HOMEPATH%\Templates\winword.doc .exe
- <SYSTEM32>\WINWORD.EXE
- C:\Documents and Settings\Default User\Templates\winword.doc .exe
- C:\Documents and Settings\Default User\Templates\winword2.doc .exe