Техническая информация
- orcus.exe
- %TEMP%\uamelqso.0.cs
- %TEMP%\uamelqso.cmdline
- %TEMP%\uamelqso.out
- %TEMP%\csc869c.tmp
- %TEMP%\res86ac.tmp
- %TEMP%\uamelqso.dll
- %ProgramFiles(x86)%\orcus\orcus.exe
- %ProgramFiles(x86)%\orcus\orcus.exe.config
- %TEMP%\watchdog.exe
- %TEMP%\watchdog.exe.config
- %ProgramFiles(x86)%\orcus\orcus.exe
- %TEMP%\res86ac.tmp
- %TEMP%\csc869c.tmp
- %TEMP%\uamelqso.0.cs
- %TEMP%\uamelqso.cmdline
- %TEMP%\uamelqso.out
- %TEMP%\uamelqso.dll
- '<LOCALNET>.1.42':10134
- '%ProgramFiles(x86)%\orcus\orcus.exe'
- '%TEMP%\watchdog.exe' /launchSelfAndExit "%ProgramFiles(x86)%\Orcus\Orcus.exe" 2704 /protectFile
- '%TEMP%\watchdog.exe' /watchProcess "%ProgramFiles(x86)%\Orcus\Orcus.exe" 2704 "/protectFile"
- '%WINDIR%\microsoft.net\framework\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\uamelqso.cmdline"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES86AC.tmp" "%TEMP%\CSC869C.tmp"' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\uamelqso.cmdline"
- '%WINDIR%\microsoft.net\framework\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RES86AC.tmp" "%TEMP%\CSC869C.tmp"