Техническая информация
- '%TEMP%\RarSFX0\Keygen.exe'
- '<SYSTEM32>\cscript.exe' "%PROGRAM_FILES%\Microsoft Office\Office14\ospp.vbs" /act
- '<SYSTEM32>\findstr.exe' "8007000D" %WINDIR%\check.txt
- '<SYSTEM32>\taskkill.exe' /F /IM Keygen.exe /t
- '<SYSTEM32>\ping.exe' -n 16 localhost
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\start.bat" "
- '<SYSTEM32>\cscript.exe' "%PROGRAM_FILES%\Microsoft Office\Office14\ospp.vbs" /inpkey:VYBBJ-TRJPB-QFQRF-QFT4D-H3GVB
- '<SYSTEM32>\cscript.exe' "%PROGRAM_FILES%\Microsoft Office\Office14\ospp.vbs" /sethst:127.0.0.1
- %WINDIR%\check.txt
- %TEMP%\RarSFX0\start.bat
- %TEMP%\RarSFX0\Keygen.exe
- %TEMP%\RarSFX0\Keygen.exe
- %WINDIR%\check.txt
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'