Техническая информация
- %TEMP%\aut1.tmp
- <SYSTEM32>\Encrypt.exe
- %TEMP%\aut2.tmp
- %APPDATA%\taskhostwin.exe
- %TEMP%\dw.log
- %HOMEPATH%\Local Settings\Tempccsetup544.exe
- %TEMP%\21340.dmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- '<SYSTEM32>\Encrypt.exe'
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 296