Техническая информация
- '%TEMP%\ime1.tmp' [512] 2864
- '<SYSTEM32>\ping.exe' 127.0.0.1
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\delself.bat"
- <SYSTEM32>\tpgenlic
- %TEMP%\ime1.tmp
- %TEMP%\delself.bat
- %ALLUSERSPROFILE%\Application Data\IMEJP10\t1.dat
- %ALLUSERSPROFILE%\Application Data\IMEJP10\imjpuex.exe
- %ALLUSERSPROFILE%\Application Data\IMEJP10\imjputyc.dll
- %ALLUSERSPROFILE%\Application Data\IMEJP10\Config.dat
- <SYSTEM32>\tpgenlic в <SYSTEM32>\tpgenlic.dll
- '15#####v54.imwork.net':81
- '15#####v54.imwork.net':10506
- DNS ASK 15#####v54.imwork.net