Техническая информация
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\SkypEmoticons\O9e0zeVg.x64.dll"
- %PROGRAM_FILES%\SkypEmoticons\O9e0zeVg.x64.dll
- %PROGRAM_FILES%\SkypEmoticons\O9e0zeVg.dat
- %ALLUSERSPROFILE%\Application Data\SkypEmoticons\w40CIk8cA.exe
- %ALLUSERSPROFILE%\Application Data\6e958a80feb239af\{65886F9B-214B-530F-E4EA-7565AFF6DE8D}.20141104182008
- %ALLUSERSPROFILE%\Application Data\SkypEmoticons\w40CIk8cA.dat
- %PROGRAM_FILES%\SkypEmoticons\O9e0zeVg.tlb
- %TEMP%\678619d2\O9e0zeVg.x64.dll
- %TEMP%\678619d2\w40CIk8cA.dat
- %TEMP%\678619d2\O9e0zeVg.tlb
- %PROGRAM_FILES%\SkypEmoticons\O9e0zeVg.dll
- %TEMP%\678619d2\O9e0zeVg.dll
- %TEMP%\678619d2\O9e0zeVg.dll
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %TEMP%\678619d2\w40CIk8cA.dat
- %TEMP%\678619d2\O9e0zeVg.x64.dll
- %TEMP%\678619d2\O9e0zeVg.tlb