Техническая информация
- '%APPDATA%\werwerwe\dfgggg\data.exe'
- '<SYSTEM32>\cmd.exe'
- '%TEMP%\data\res\wqeq\config\data.exe' -p678574575475
- '%TEMP%\data\res\wqeq\config\run.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\run.bat" "
- <SYSTEM32>\cmd.exe
- %TEMP%\evb3.tmp
- %TEMP%\PSE20\4058baf4864b5b3c6fb89111f189b9bf\php.ini
- %TEMP%\DrWeb.exe
- %TEMP%\install_Data.exe
- %TEMP%\data\res\wqeq\config\run.exe
- %TEMP%\data\res\wqeq\config\data.exe
- %APPDATA%\werwerwe\dfgggg\data.exe
- %TEMP%\1.tmp\run.bat
- %TEMP%\1.tmp\run.bat
- %TEMP%\evb3.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''