Техническая информация
- %TEMP%\nsp5.tmp\ns8.tmp "taskkill.exe" /F /IM 1click.exe /T
- %TEMP%\nsp5.tmp\ns9.tmp "taskkill.exe" /F /IM winvnc.exe /T
- %TEMP%\nsp5.tmp\nsA.tmp "taskkill.exe" /F /IM 1click.exe /T
- %TEMP%\A~ADVANTIGu_.exe _?=<Текущая директория>\
- %TEMP%\nsp5.tmp\ns6.tmp "kill.exe" winvnc
- %TEMP%\nsp5.tmp\ns7.tmp "tskill.exe" winvnc
- <SYSTEM32>\taskkill.exe /F /IM winvnc.exe /T
- <SYSTEM32>\taskkill.exe /F /IM 1click.exe /T
- <SYSTEM32>\tskill.exe winvnc
- %TEMP%\nsp5.tmp\ns7.tmp
- %TEMP%\nsp5.tmp\ns6.tmp
- %TEMP%\nsp5.tmp\ns8.tmp
- %TEMP%\nsp5.tmp\nsA.tmp
- %TEMP%\nsp5.tmp\ns9.tmp
- %TEMP%\A~ADVANTIGu_.exe
- %TEMP%\nsn2.tmp
- %TEMP%\nse4.tmp
- %TEMP%\nsp5.tmp\nsExec.dll
- <Текущая директория>\Stop.dat
- %TEMP%\nsp5.tmp\ns9.tmp
- %TEMP%\nsp5.tmp\nsA.tmp
- %TEMP%\nsp5.tmp\nsExec.dll
- %TEMP%\nsp5.tmp\ns6.tmp
- %TEMP%\nsp5.tmp\ns7.tmp
- %TEMP%\nsp5.tmp\ns8.tmp
- ClassName: '' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''