Техническая информация
- '%APPDATA%\Program.exe'
- '%TEMP%\st.exe'
- '%TEMP%\com.exe'
- '%TEMP%\Desktop.exe' -p654321 -d%HOMEPATH%\Local Settings\Temp
- '%APPDATA%\InstallPack.exe'
- '%TEMP%\mslbvm40.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\Install.bat" "
- %TEMP%\~DF4531.tmp
- %TEMP%\~DF42B9.tmp
- %TEMP%\~DF4276.tmp
- %TEMP%\~DF484A.tmp
- %TEMP%\nsp3.tmp\modern-wizard.bmp
- %TEMP%\nsp3.tmp\ioSpecial.ini
- %TEMP%\nsp3.tmp\System.dll
- %TEMP%\st.exe
- %TEMP%\Install.bat
- %APPDATA%\Program.exe
- %APPDATA%\InstallPack.exe
- %TEMP%\Desktop.exe
- %TEMP%\com.exe
- <SYSTEM32>\mslbvm40.dll
- %TEMP%\mslbvm40.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''