Техническая информация
- '<SYSTEM32>\cmd.exe' /S /D /c" echo y"
- '<SYSTEM32>\regini.exe' <SYSTEM32>\zjjw.ini
- '<SYSTEM32>\cacls.exe' <SYSTEM32>\scad.dll /d everyone
- '<SYSTEM32>\cacls.exe' %TEMP%\scad.dll /d everyone
- '<SYSTEM32>\taskkill.exe' /f /im "Barclient.exe"
- '<SYSTEM32>\cmd.exe' /c %TEMP%\bt2403.bat
- '<SYSTEM32>\reg.exe' delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions" /f
- '<SYSTEM32>\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs" /f
- <SYSTEM32>\zjjw.ini
- %TEMP%\bt2403.bat
- %TEMP%\bt2403.bat
- ClassName: '' WindowName: ''