Техническая информация
- '<SYSTEM32>\PubwinAD.exe'
- '<SYSTEM32>\cacls.exe' %HOMEPATH%\Local Settings\Temp /p everyone:f
- <SYSTEM32>\PubwinAD.exe
- <SYSTEM32>\Pubwin.exe
- %TEMP%\bt66831.bat
- <SYSTEM32>\update.exe
- <SYSTEM32>\PubwinEncr1.dat
- <SYSTEM32>\PubwinEncr2.dat
- <SYSTEM32>\Q457514.exe
- %TEMP%\bt66831.bat
- <SYSTEM32>\PubwinEncr2.dat
- <SYSTEM32>\update.exe
- %TEMP%\bt66831.bat
- <SYSTEM32>\Pubwin.exe
- <SYSTEM32>\PubwinAD.exe
- <SYSTEM32>\PubwinEncr1.dat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''