Техническая информация
- '<SYSTEM32>\taskkill.exe' /f /im translita.exe
- %TEMP%\1.tmp\Translita.vbs
- ClassName: '' WindowName: ''
- '<SYSTEM32>\wscript.exe' "%TEMP%\1.tmp\Translita.vbs"
- '<SYSTEM32>\cmd.exe' /c taskkill /f /im translita.exe
- '<SYSTEM32>\cmd.exe' /c explorer C:\Users\ATK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TranslitA.exe.lnk
- '%WINDIR%\explorer.exe' C:\Users\ATK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TranslitA.exe.lnk