Техническая информация
- %TEMP%\is-n4hln.tmp\<Имя файла>.tmp
- %TEMP%\is-9j7qu.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-9j7qu.tmp\_isetup\_iscrypt.dll
- %ProgramFiles%\placeat\is-1ksul.tmp
- %ProgramFiles%\placeat\is-f81pg.tmp
- %ProgramFiles%\placeat\is-5ea8v.tmp
- %ProgramFiles%\placeat\is-sve4j.tmp
- %ProgramFiles%\placeat\et\is-948lv.tmp
- %ProgramFiles%\placeat\et\is-onph3.tmp
- %ProgramFiles%\placeat\et\is-peids.tmp
- %ProgramFiles%\placeat\et\is-87e81.tmp
- %ProgramFiles%\placeat\et\is-notu4.tmp
- %ProgramFiles%\placeat\unins000.dat
- %ProgramFiles%\placeat\is-1ksul.tmp в %ProgramFiles%\placeat\unins000.exe
- %ProgramFiles%\placeat\is-f81pg.tmp в %ProgramFiles%\placeat\iure.txt
- %ProgramFiles%\placeat\is-5ea8v.tmp в %ProgramFiles%\placeat\recusandae.txt
- %ProgramFiles%\placeat\is-sve4j.tmp в %ProgramFiles%\placeat\repellendus.txt
- %ProgramFiles%\placeat\et\is-948lv.tmp в %ProgramFiles%\placeat\et\eos.exe
- %ProgramFiles%\placeat\et\is-onph3.tmp в %ProgramFiles%\placeat\et\ipsum.txt
- %ProgramFiles%\placeat\et\is-peids.tmp в %ProgramFiles%\placeat\et\occaecati.txt
- %ProgramFiles%\placeat\et\is-87e81.tmp в %ProgramFiles%\placeat\et\quibusdam.txt
- %ProgramFiles%\placeat\et\is-notu4.tmp в %ProgramFiles%\placeat\et\sequi.txt
- 'jo###fornk.live':80
- http://jo###fornk.live/v3/api
- DNS ASK jo###fornk.live
- ClassName: 'CDC6B87A-25C2-4586-B107-40ECBA451EDD' WindowName: ''
- '%TEMP%\is-n4hln.tmp\<Имя файла>.tmp' /SL5="$150218,3648582,140800,<Полный путь к файлу>"
- '%ProgramFiles%\placeat\et\eos.exe' 5e801a16758629f9d4473266c4d85a22