Техническая информация
- %TEMP%\afolder\winput.exe "Login to Complete the IGIN Upgrade" "set ACCESSUSER=$input-" "Please note, the following question refers to DigitaLogic's Default IGIN Credentials. ^If you do not remember the defaults, System %USERNAME%s call DigitaLogic ^ ^ Enter User Name ^"
- %TEMP%\afolder\PKGFIX UPGRADE.exe
- <SYSTEM32>\taskkill.exe /F /T /IM "PKGFIX UPGRADE.exe"
- <SYSTEM32>\taskkill.exe /F /T /IM ""
- <SYSTEM32>\cmd.exe /c ""%TEMP%\ztmp\t2689.bat" "%TEMP%\afolder\PKGFIX UPGRADE.exe" "
- <SYSTEM32>\cmd.exe /c ""%TEMP%\ztmp\t22200.bat" "<Полный путь к вирусу>" "
- <SYSTEM32>\taskkill.exe /F /T /IM "Upgrade_IGIN.exe"
- <SYSTEM32>\taskkill.exe /F /T /IM "Security-Enable.exe"
- <SYSTEM32>\lsass.exe
- System
- <SYSTEM32>\alg.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\spoolsv.exe
- %TEMP%\afolder\CMW.dll
- %TEMP%\afolder\DBAExe.exe
- %TEMP%\afolder\Security-Enable.exe
- %TEMP%\afolder\UPGRADE_IGIN.exe
- %TEMP%\afolder\winput.exe
- %TEMP%\afolder\DLPC.exe
- %TEMP%\ztmp\t2689.bat
- %TEMP%\ztmp\t2742.exe
- %TEMP%\afolder\RTU.dll
- %TEMP%\afolder\DNPM.dll
- %TEMP%\afolder\MDS.dll
- %TEMP%\afolder\starttask.bat
- %TEMP%\afolder\PKGFIX.txt
- %TEMP%\ztmp\t22253.exe
- %TEMP%\afolder\PKGFIX UPGRADE.exe
- %TEMP%\ztmp\t22200.bat
- %TEMP%\afolder\chgcolor.exe
- %TEMP%\afolder\KILLTASK.exe
- %TEMP%\afolder\tst10.exe
- %TEMP%\afolder\IGIN-TEST.exe
- %TEMP%\afolder\cmdFocus.exe
- %TEMP%\afolder\IGIN-CLEANUP.bat
- %TEMP%\ztmp\t22253.exe
- %TEMP%\ztmp\t22200.bat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'DL Upgrade Login'
- ClassName: '' WindowName: ''