Техническая информация
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles(x86)%\what_you_say\be_youself\seduksenchuk.ico
- %ProgramFiles(x86)%\what_you_say\be_youself\eto_trava_detka.ggg
- %ProgramFiles(x86)%\what_you_say\be_youself\zapuskalka.bat
- %ProgramFiles(x86)%\what_you_say\be_youself\come_to_my_window.aga
- %ProgramFiles(x86)%\what_you_say\be_youself\alone_ndklokajos.olpo
- %ProgramFiles(x86)%\what_you_say\be_youself\tooo_my_blooood.vbs
- %ProgramFiles(x86)%\what_you_say\be_youself\come.vbs
- %ProgramFiles(x86)%\what_you_say\be_youself\uninstall.exe
- %ProgramFiles(x86)%\what_you_say\be_youself\uninstall.ini
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- '64.##.191.222':4321
- '%WINDIR%\syswow64\wscript.exe' "%ProgramFiles(x86)%\what_you_say\be_youself\come.vbs"
- '%WINDIR%\syswow64\wscript.exe' "%ProgramFiles(x86)%\what_you_say\be_youself\tooo_my_blooood.vbs"
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\what_you_say\be_youself\zapuskalka.bat" "' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\what_you_say\be_youself\zapuskalka.bat" "