Техническая информация
- %TEMP%\aut1.tmp
- %ALLUSERSPROFILE%\Application Data\Setup.exe
- %TEMP%\aut2.tmp
- %ALLUSERSPROFILE%\Application Data\Setup2.exe
- %HOMEPATH%\AppData\Roaming\Windows\8.vbs
- %HOMEPATH%\AppData\Roaming\Windows\9.vbs
- %HOMEPATH%\AppData\Roaming\Windows\18.vbs
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- ClassName: 'EDIT' WindowName: ''
- '%ALLUSERSPROFILE%\Application Data\Setup.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\AppData\Roaming\Windows\8.vbs"
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\AppData\Roaming\Windows\9.vbs"
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\AppData\Roaming\Windows\18.vbs"
- '%ALLUSERSPROFILE%\Application Data\Setup2.exe'