Техническая информация
- '%APPDATA%\fitmax.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe'
- '<SYSTEM32>\schtasks.exe' /Create /TN "Update\fitmax" /XML "%TEMP%\784002630.xml"
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- ClassName: 'TibiaClient' WindowName: ''
- %APPDATA%\fitmax.exe:ZONE.identifier
- %TEMP%\784002630.xml
- <Полный путь к вирусу>:ZONE.identifier
- %APPDATA%\fitmax.exe
- %TEMP%\784002630.xml
- ClassName: 'TibiaClientPreview' WindowName: ''
- ClassName: '' WindowName: ''