Техническая информация
- '%TEMP%\wrar50b5.exe'
- '<SYSTEM32>\net1.exe' stop WEBSCANX
- '<SYSTEM32>\net.exe' stop ANTIVIR
- '<SYSTEM32>\net1.exe' stop ANTIVIR
- '<SYSTEM32>\net.exe' stop SAFEWEB
- '<SYSTEM32>\net1.exe' stop SAFEWEB
- '<SYSTEM32>\net.exe' stop WEBSCANX
- '<SYSTEM32>\net1.exe' stop Norton
- '<SYSTEM32>\net.exe' stop NVC95
- '<SYSTEM32>\net1.exe' stop NVC95
- '<SYSTEM32>\net.exe' stop MCAFEE
- '<SYSTEM32>\net1.exe' stop MCAFEE
- '<SYSTEM32>\net.exe' stop Norton
- '<SYSTEM32>\net1.exe' stop ICMON
- '<SYSTEM32>\net.exe' stop SharedAccess
- '<SYSTEM32>\net1.exe' stop SharedAccess
- '<SYSTEM32>\net.exe' stop AVP.EXE
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\AVKILL.bat" "
- '<SYSTEM32>\net.exe' stop УSecurity CenterФ
- '<SYSTEM32>\net1.exe' stop УSecurity CenterФ
- '<SYSTEM32>\net.exe' stop CFINET
- '<SYSTEM32>\net1.exe' stop CFINET
- '<SYSTEM32>\net.exe' stop ICMON
- '<SYSTEM32>\net1.exe' stop AVP.EXE
- '<SYSTEM32>\net.exe' stop CFINET32
- '<SYSTEM32>\net1.exe' stop CFINET32
- %TEMP%\AVKILL.bat
- %TEMP%\wrar50b5.exe
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''