Техническая информация
- '%ProgramFiles%\microsoft office\office14\excel.exe' /dde
- %TEMP%\a9r1iftu3q_s7a0co_1pw.tmp\has been verified. however pdf, png, docx, .xlsx
- %TEMP%\a9r1iftu3q_s7a0co_1pw.tmp\~$has been verified. however pdf, png, docx, .xlsx
- %TEMP%\eadc.tmp
- '18#.#39.243.122':80
- http://18#.#39.243.122/421/vbc.exe
- ClassName: 'XLMAIN' WindowName: 'Microsoft Excel (Product Activation Failed) - Book1'
- ClassName: 'XLMAIN' WindowName: ''
- '%CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe' -Embedding