Техническая информация
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\A9R2zb1cx_yga8ho_1h4.tmp\eicar-dropper.doc"
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1400' = '00000003'
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1C00' = '00000000'
- %TEMP%\a9r2zb1cx_yga8ho_1h4.tmp\eicar-dropper.doc
- %TEMP%\a9rxxqg4j_yga8hp_1h4.tmp
- %TEMP%\a9rbhljii_yga8hr_1h4.tmp
- %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cookie\cookies-journal
- %TEMP%\etilqs_pj0b4gwtxki504i
- %LOCALAPPDATA%\adobe\acrocef\dc\acrobat\cookie\cookies