Техническая информация
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %WINDIR%\Explorer.EXE
- %APPDATA%\Roaming\avdrn.dat
- %TEMP%\~TM15258.TMP
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winesm32.exe
- %TEMP%\~TM8A92.tmp
- %TEMP%\~TM8C67.tmp
- %TEMP%\~TM8D04.tmp
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winesm32.exe
- %TEMP%\~TM8D04.tmp
- %TEMP%\~TM15258.TMP
- %TEMP%\~TM8A92.tmp
- %TEMP%\~TM8C67.tmp