Техническая информация
- '<LS_APPDATA>\GSupport_FREE\GSVNC_SERVER.Exe'
- '<SYSTEM32>\regsvr32.exe' /s scvncsrvx.dll
- '<SYSTEM32>\regsvr32.exe' /s scvncctrl64.dll
- '<SYSTEM32>\cmd.exe' /c "<LS_APPDATA>\GSupport_FREE\sfw.bat "<LS_APPDATA>\GSupport_FREE\GSVNC_SERVER.exe" GSupport-Client"
- '<SYSTEM32>\regsvr32.exe' /s scvncsrvx64.dll
- '<SYSTEM32>\regsvr32.exe' /s scvncctrl.dll
- '<SYSTEM32>\taskkill.exe' /F /IM explorer.exe
- '<SYSTEM32>\cmd.exe' /c "<LS_APPDATA>\GSupport_FREE\uac_mode.bat"
- '<SYSTEM32>\cmd.exe' /c "<LS_APPDATA>\GSupport_FREE\reg.bat"
- '%WINDIR%\explorer.exe'
- %WINDIR%\Explorer.EXE
- <LS_APPDATA>\GSupport_FREE\reg.bat
- <LS_APPDATA>\GSupport_FREE\uac_mode.bat
- <LS_APPDATA>\GSupport_FREE\sfw.bat
- %TEMP%\ssx1.tmp
- %HOMEPATH%\Desktop\지너스써포트 원격지원(FREE).lnk
- <LS_APPDATA>\GSupport_FREE\SSHClient.exe
- <LS_APPDATA>\GSupport_FREE\scvncsrvx64.dll
- <LS_APPDATA>\GSupport_FREE\scvncsrvx.dll
- <SYSTEM32>\scvncsrvx.dll
- <LS_APPDATA>\GSupport_FREE\GSVNC_SERVER.Exe
- <SYSTEM32>\scvncsrvx64.dll
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'CSCHiddenWindow' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'BaseBar' WindowName: 'ChanApp'
- ClassName: 'Proxy Desktop' WindowName: ''