Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\TNiReaASPYBZ.lnk
- '<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1d3e.dir00\wscript.exe.hdmp 16325836412027092
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\sysdm.cpl,NoExecuteProcessException <SYSTEM32>\wscript.exe
- '<SYSTEM32>\dumprep.exe' 1144 -dm 7 7 %TEMP%\WER1d3e.dir00\wscript.exe.mdmp 16325836412027072
- '%APPDATA%\MJLe.exe' "%APPDATA%\MJLee.au3"
- '<SYSTEM32>\wscript.exe'
- <SYSTEM32>\wscript.exe
- <SYSTEM32>\wscript.exe
- %TEMP%\WER1d3e.dir00\wscript.exe.hdmp
- %TEMP%\WER1d3e.dir00\wscript.exe.mdmp
- %TEMP%\WER1d3e.dir00\manifest.txt
- %TEMP%\WER1d3e.dir00\appcompat.txt
- %TEMP%\krbnssi
- %TEMP%\aut1.tmp
- %APPDATA%\MJLee.au3
- %APPDATA%\MJLe.exe
- %HOMEPATH%\HwXBChGr7xzobTjO\MJLee.au3
- %HOMEPATH%\HwXBChGr7xzobTjO\MJLe.exe
- %TEMP%\krbnssi
- %TEMP%\aut1.tmp
- %APPDATA%\MJLe.exe в %HOMEPATH%\HwXBChGr7xzobTjO\MJLe.exe
- %APPDATA%\MJLee.au3 в %HOMEPATH%\HwXBChGr7xzobTjO\MJLee.au3
- ClassName: 'Shell_TrayWnd' WindowName: ''