Техническая информация
- <SYSTEM32>\at.exe 18:37 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\lks.exe""
- <SYSTEM32>\at.exe 18:43 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\hpc.exe""
- <SYSTEM32>\at.exe 18:31 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\pst.exe""
- <SYSTEM32>\at.exe 18:19 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\nst.exe""
- <SYSTEM32>\at.exe 18:25 /every:M,T,W,Th,F,Sa,Su ""%WINDIR%\chp.exe""
- %TEMP%\nsa3.tmp\ns5.tmp
- %TEMP%\nsa3.tmp\ns4.tmp
- %TEMP%\nsa3.tmp\nsExec.dll
- %TEMP%\nsa3.tmp\ns8.tmp
- %TEMP%\nsa3.tmp\ns7.tmp
- %TEMP%\nsa3.tmp\ns6.tmp
- %WINDIR%\chp.exe
- %WINDIR%\nst.exe
- %TEMP%\nsz2.tmp
- %WINDIR%\hpc.exe
- %WINDIR%\lks.exe
- %WINDIR%\pst.exe
- %WINDIR%\lks.exe
- %WINDIR%\hpc.exe
- %WINDIR%\pst.exe
- %WINDIR%\nst.exe
- %WINDIR%\chp.exe
- %TEMP%\nsa3.tmp\ns7.tmp
- %TEMP%\nsa3.tmp\ns8.tmp
- %TEMP%\nsa3.tmp\nsExec.dll
- %TEMP%\nsa3.tmp\ns4.tmp
- %TEMP%\nsa3.tmp\ns5.tmp
- %TEMP%\nsa3.tmp\ns6.tmp