Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\explorer.lnk
- C:\ProgramData\Windows\bot.exe
- C:\ProgramData\Windows\svchost.vbs
- C:\ProgramData\Windows\csrs.exe
- %ProgramFiles%\Company\SetUp\bot1.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles%\Company\SetUp\Новый .vbs
- C:\ProgramData\Windows\csrs.exe
- %TEMP%\$inst\temp_0.tmp
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' "c:\ProgramData\Windows\svchost.VBS"
- 'C:\ProgramData\Windows\bot.exe'
- '%ProgramFiles%\Company\SetUp\bot1.exe' -p777
- '<SYSTEM32>\wscript.exe' "%ProgramFiles%\Company\SetUp\Новый .vbs"