Trojan.MulDrop8.34647

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\taskkill.exe' /T /PID "2856"

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\taskkill.exe
<SYSTEM32>\cmd.exe

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\ASC-555FA0A1\<Имя файла>.exe
%TEMP%\ASC-555FA0A1\InsPage6_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component410.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component411.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component412.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component50.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component51.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component52.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component60.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component61.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component62.PNG
%TEMP%\ASC-555FA0A1\Installer.png
%TEMP%\ASC-555FA0A1\UniPage1_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component20.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component30.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component31.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component32.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component392.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component390.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component10.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component330.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component331.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component332.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component340.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component341.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component342.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component350.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component351.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component352.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component360.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component361.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component362.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component370.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component371.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component372.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component380.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component381.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component382.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component391.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component70.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component71.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component72.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component90.PNG
%TEMP%\ASC-555FA0A1\Constants1.ini
%TEMP%\ASC-555FA0A1\Dialog.ini
%TEMP%\asc2DED1FA4.bat
%TEMP%\ASC-555FA0A1\Installer.ini
%TEMP%\ASC-555FA0A1\Setup.ini
%TEMP%\ASC-555FA0A1\Uninstaller.ini
%TEMP%\ASC-555FA0A1\InsPage1_Component33.L
%TEMP%\ASC-555FA0A1\InsPage4_Component10.L
%TEMP%\ASC-555FA0A1\InsPage5_Component13.L
%TEMP%\ASC-555FA0A1\UniPage1_Component10.L
%TEMP%\ASC-555FA0A1\opencl.dll
%TEMP%\ASC-555FA0A1\<Имя файла>.tmp
%TEMP%\ASC-555FA0A1\UniPage4_Component42.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component41.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component210.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component60.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component61.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component62.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component80.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component20.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component31.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component32.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component41.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component42.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component30.PNG
%TEMP%\ASC-555FA0A1\Resources.ini
%TEMP%\ASC-555FA0A1\InsPage5_Component72.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component110.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component311.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component312.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component32.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component100.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component110.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component270.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component271.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component272.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component60.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component61.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component62.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component70.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component71.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component72.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component80.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component310.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component31.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component20.PNG
%TEMP%\ASC-555FA0A1\7z.dll
%TEMP%\ASC-555FA0A1\unarc.dll
%TEMP%\ASC-555FA0A1\unarc.exe
%TEMP%\ASC-555FA0A1\temp1.asc
%TEMP%\ASC-555FA0A1\Fonts.ini
%TEMP%\ASC-555FA0A1\temp2.asc
%TEMP%\ASC-555FA0A1\arc.ini
%TEMP%\ASC-555FA0A1\cls-srep.dll
%TEMP%\ASC-555FA0A1\dec.exe
%TEMP%\ASC-555FA0A1\fazip.exe
%TEMP%\ASC-555FA0A1\ISDone.dll
%TEMP%\ASC-555FA0A1\msr.exe
%TEMP%\ASC-555FA0A1\srep.exe
%TEMP%\ASC-555FA0A1\temp3.asc
%TEMP%\ASC-555FA0A1\InsPage1_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component170.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component171.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component172.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component190.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component30.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component20.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component30.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component31.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component80.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component81.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component82.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component90.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component91.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component92.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component10.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component70.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component100.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component111.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component112.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component50.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component51.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component52.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component71.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component72.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component70.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component20.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component122.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component311.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component312.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component32.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component330.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component331.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component332.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component71.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component470.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component51.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component52.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component90.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component91.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component92.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component120.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component121.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component310.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component50.PNG
%TEMP%\asc4F1AB238.bat

Удаляет следующие файлы:

%TEMP%\ASC-555FA0A1\temp1.asc
%TEMP%\ASC-555FA0A1\InsPage6_Component391.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component392.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component410.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component411.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component412.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component50.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component51.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component52.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component60.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component61.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component62.PNG
%TEMP%\ASC-555FA0A1\Installer.ini
%TEMP%\ASC-555FA0A1\Installer.png
%TEMP%\ASC-555FA0A1\ISDone.dll
%TEMP%\ASC-555FA0A1\msr.exe
%TEMP%\ASC-555FA0A1\opencl.dll
%TEMP%\ASC-555FA0A1\InsPage6_Component390.PNG
%TEMP%\ASC-555FA0A1\Setup.ini
%TEMP%\ASC-555FA0A1\InsPage6_Component382.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component380.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component71.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component72.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component10.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component330.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component331.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component332.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component340.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component341.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component342.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component350.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component351.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component352.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component360.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component361.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component362.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component370.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component371.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component372.PNG
%TEMP%\ASC-555FA0A1\InsPage6_Component381.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component62.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component72.PNG
%TEMP%\ASC-555FA0A1\unarc.exe
%TEMP%\ASC-555FA0A1\UniPage3_Component20.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component30.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component31.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component32.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component41.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component42.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component41.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component42.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component70.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component71.PNG
%TEMP%\ASC-555FA0A1\UniPage3_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component70.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component80.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component61.PNG
%TEMP%\ASC-555FA0A1\Uninstaller.ini
%TEMP%\ASC-555FA0A1\UniPage1_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component10.L
%TEMP%\ASC-555FA0A1\UniPage1_Component20.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component30.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component31.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component32.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component40.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component41.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component42.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage1_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component00.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component210.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component50.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component51.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component52.PNG
%TEMP%\ASC-555FA0A1\UniPage2_Component60.PNG
%TEMP%\ASC-555FA0A1\srep.exe
%TEMP%\ASC-555FA0A1\unarc.dll
%TEMP%\ASC-555FA0A1\InsPage5_Component52.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component30.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component312.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component32.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component33.L
%TEMP%\ASC-555FA0A1\InsPage1_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component100.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component110.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component270.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component271.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component272.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component60.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component61.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component62.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component70.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component71.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component72.PNG
%TEMP%\ASC-555FA0A1\InsPage2_Component80.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component311.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component310.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component30.PNG
%TEMP%\ASC-555FA0A1\temp2.asc
%TEMP%\ASC-555FA0A1\temp3.asc
%TEMP%\ASC-555FA0A1\Resources.ini
%TEMP%\ASC-555FA0A1\Constants1.ini
%TEMP%\ASC-555FA0A1\<Имя файла>.exe
%TEMP%\ASC-555FA0A1\7z.dll
%TEMP%\ASC-555FA0A1\arc.ini
%TEMP%\ASC-555FA0A1\<Имя файла>.tmp
%TEMP%\ASC-555FA0A1\cls-srep.dll
%TEMP%\ASC-555FA0A1\dec.exe
%TEMP%\ASC-555FA0A1\Dialog.ini
%TEMP%\ASC-555FA0A1\fazip.exe
%TEMP%\ASC-555FA0A1\Fonts.ini
%TEMP%\ASC-555FA0A1\InsPage1_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component170.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component171.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component172.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component190.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component20.PNG
%TEMP%\ASC-555FA0A1\InsPage1_Component31.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component121.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component50.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component31.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component70.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component71.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component72.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component80.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component81.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component82.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component90.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component91.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component92.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component10.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component100.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component110.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component111.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component112.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component13.L
%TEMP%\ASC-555FA0A1\InsPage5_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component20.PNG
%TEMP%\ASC-555FA0A1\InsPage5_Component51.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component122.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component120.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component310.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component311.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component312.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component32.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component330.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component331.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component332.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component40.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component41.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component42.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component470.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component50.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component51.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component52.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component90.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component91.PNG
%TEMP%\ASC-555FA0A1\InsPage3_Component92.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component00.PNG
%TEMP%\ASC-555FA0A1\InsPage4_Component10.L
%TEMP%\ASC-555FA0A1\InsPage3_Component20.PNG
%TEMP%\ASC-555FA0A1\UniPage4_Component90.PNG

Другое:

Ищет следующие окна:

ClassName: 'OSKMainClass' WindowName: ''
ClassName: 'THeadForm' WindowName: '17E9CABA'
ClassName: '' WindowName: ''

Создает и запускает на исполнение:

'%TEMP%\ASC-555FA0A1\<Имя файла>.exe' "<Полный путь к файлу>:rzr"

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c "%TEMP%\asc2DED1FA4.bat"
'<SYSTEM32>\cmd.exe' /c "%TEMP%\asc4F1AB238.bat"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней