Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\.lnk
- 'C:\996661\svchost.exe'
- '%TEMP%\RemoveWAT.exe'
- C:\996661\svchost.exe
- C:\1d8784c7a421d340cfd179503fe59ddc798a351c
- %TEMP%\RemoveWAT.exe
- C:\1d8784c7a421d340cfd179503fe59ddc798a351c
- ClassName: 'Shell_TrayWnd' WindowName: ''