Техническая информация
- %WINDIR%\Tasks\At1.job
- %TEMP%\Cricket.exe
- %TEMP%\nsn3.tmp\ns4.tmp <SYSTEM32>\cmd.exe /C at 16:00 /every:M,T,W,Th,F,Sa,Su ""%TEMP%\syncupdtr.exe""
- <SYSTEM32>\sethc.exe 011
- <SYSTEM32>\at.exe 16:00 /every:M,T,W,Th,F,Sa,Su ""%TEMP%\syncupdtr.exe""
- %TEMP%\nsn3.tmp\nsExec.dll
- %TEMP%\nsn3.tmp\ns4.tmp
- <SYSTEM32>\d3d8caps.dat
- %TEMP%\nsu2.tmp
- %TEMP%\syncupdtr.exe
- %TEMP%\Cricket.exe
- %TEMP%\Cricket.exe
- %TEMP%\syncupdtr.exe
- %TEMP%\nsn3.tmp\nsExec.dll
- %TEMP%\nsn3.tmp\ns4.tmp
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''