Техническая информация
- скрытых файлов
- расширений файлов
- C:\user\data\info\office102.exe
- C:\user\data\info\a.exe
- <SYSTEM32>\attrib.exe C:\user\data\ +s +h
- <SYSTEM32>\attrib.exe C:\user +s +h
- <SYSTEM32>\attrib.exe c:\ApplicationData +s +h
- <SYSTEM32>\wscript.exe "C:\user\data\info\a.vbs"
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\a.bat" "
- <SYSTEM32>\wscript.exe "C:\user\data\info\office102.vbs"
- %TEMP%\1.tmp\a.bat
- C:\user\data\info\a.exe
- %TEMP%\bbumvog
- %TEMP%\aut7.tmp
- C:\user\data\info\office102.exe
- C:\user\data\info\a.vbs
- C:\user\data\info\RAW Agent got Arrested From Malir.doc
- C:\user\data\info\office102.vbs
- %TEMP%\1.tmp\a.bat
- %TEMP%\bbumvog
- %TEMP%\aut7.tmp
- ClassName: 'WordPadClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''