Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\WSCollect.lnk
- %HOMEPATH%\Start Menu\Programs\Startup\EhStorAuthn.lnk
- %APPDATA%\dmaster (1).exe
- %APPDATA%\dmaster.exe
- %TEMP%\is-M8EE5.tmp\dmaster.tmp
- C:\ProgramData\ActionCenterCPLS\WSCollect.exe
- C:\ProgramData\ActionCenterCPLS\config.json
- C:\ProgramData\ActionCenterCPLS\EhStorAuthn.exe
- C:\ProgramData\ActionCenterCPLS\WebViewerPro.exe
- C:\ProgramData\ActionCenterCPLS\WebViewerPro.exe
- C:\ProgramData\ActionCenterCPLS\WSCollect.exe
- C:\ProgramData\ActionCenterCPLS\config.json
- C:\ProgramData\ActionCenterCPLS\EhStorAuthn.exe
- '%TEMP%\is-M8EE5.tmp\dmaster.tmp' /SL5="$1013E,7336009,121344,%APPDATA%\dmaster.exe"
- '%APPDATA%\dmaster.exe'