Техническая информация
- %WINDIR%\Temp\systen.exe
- %WINDIR%\Temp\rar.exe e -y -ping %WINDIR%\temp\ok.rar %WINDIR%\web\ e -y -ping %WINDIR%\temp\usbhard.rar %WINDIR%\temp\
- <SYSTEM32>\attrib.exe -S -H c:\ma.exe
- <SYSTEM32>\wscript.exe "%WINDIR%\temp\00.vbs"
- <SYSTEM32>\cmd.exe /c %WINDIR%\temp\ok.bat
- <SYSTEM32>\ping.exe 127.0.0.1 -n 1
- <SYSTEM32>\cmd.exe /c %WINDIR%\temp\125.bat
- <SYSTEM32>\cmd.exe /c <Текущая директория>\11a.bat
- <SYSTEM32>\taskkill.exe /f /t /im ksafetray.exe
- %WINDIR%\Temp\systen.exe
- %WINDIR%\Temp\systen.txt
- %WINDIR%\Temp\00.txt
- %WINDIR%\Web\lsiss.txt
- %WINDIR%\Temp\1.txt
- %WINDIR%\Temp\00.vbs
- %WINDIR%\Temp\md5.txt
- %WINDIR%\Temp\rar.exe
- %WINDIR%\Temp\usbhard.rar
- %WINDIR%\Temp\ok.rar
- <Текущая директория>\11a.bat
- %WINDIR%\Temp\125.bat
- %WINDIR%\Temp\ok.bat
- %WINDIR%\Temp\systen.txt
- ClassName: '' WindowName: ''