Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft.lnk
- C:\Log\1.exe
- C:\Log\bitcoin.bat
- C:\Log\fan.exe
- C:\Log\2.exe
- C:\Log\Download_Error.txt
- C:\Log\4.exe
- C:\Log\3.exe
- C:\Log\update.exe
- C:\Log\ccwbw.bat
- C:\Log\run.vbs
- C:\Log\rar.exe
- C:\Log\db.rar
- C:\Log\build.exe
- C:\Log\shfhc.vbs
- C:\Log\cchq.bat
- C:\Log\db.rar
- C:\Log\rar.exe
- C:\Log\run.vbs
- 'wp#d':80
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK wp#d
- ClassName: 'EDIT' WindowName: ''
- 'C:\Log\2.exe'
- 'C:\Log\3.exe'
- 'C:\Log\4.exe'
- 'C:\Log\1.exe'
- '<SYSTEM32>\wscript.exe' "C:\Log\run.vbs"
- 'C:\Log\rar.exe' e -p7973 db.rar
- '<SYSTEM32>\wscript.exe' "C:\Log\shfhc.vbs"
- '<SYSTEM32>\powercfg.exe' -change -standby-timeout-ac 0
- '<SYSTEM32>\cmd.exe' /c ""C:\Log\bitcoin.bat" "
- '<SYSTEM32>\cmd.exe' /c ""C:\Log\ccwbw.bat" "
- '<SYSTEM32>\cmd.exe' /c ""C:\Log\cchq.bat" "