Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\config.exe
- '<SYSTEM32>\wscript.exe' "%TEMP%\dump.vbs"
- %TEMP%\test3.txt
- %TEMP%\test2.txt
- %TEMP%\test4.txt
- %TEMP%\test6.txt
- %TEMP%\test5.txt
- %TEMP%\dump.vbs
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\test.txt
- %TEMP%\deepweb.txt
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp