Техническая информация
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%8
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\_filelst.cfg
- %TEMP%\%USERNAME%2.txt
- %APPDATA%\wnlogon\tmp9791.bin
- %APPDATA%\wnlogon\ownlogon.exe
- %APPDATA%\wnlogon\install_log.txt
- %TEMP%\%USERNAME%8
- %APPDATA%\wnlogon\ownlogon.exe
- %TEMP%\%USERNAME%2.txt
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%8
- 'wr##.#edirectme.net':27013
- DNS ASK wr##.#edirectme.net
- '<Полный путь к файлу>'
- '<SYSTEM32>\schtasks.exe' /delete /tn "ownlogonUpdater" /F
- '<SYSTEM32>\schtasks.exe' /create /tn "ownlogonUpdater" /SC MINUTE /MO 30 /TR "%APPDATA%\wnlogon\ownlogon.exe" /rl "LIMITED "
- '<SYSTEM32>\cmd.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE'