Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\optimize.exe
- %HOMEPATH%\desktop\508softwareandos.doc
- %HOMEPATH%\desktop\toolbar.bmp
- %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx
- %HOMEPATH%\desktop\testee.cer
- %HOMEPATH%\desktop\lisp_success.doc
- %HOMEPATH%\desktop\iisstart.html
- %HOMEPATH%\desktop\dialmap.bmp
- %HOMEPATH%\desktop\dial.bmp
- %HOMEPATH%\desktop\dashborder_192.bmp
- %HOMEPATH%\desktop\trivial-merge.html
- %HOMEPATH%\desktop\dashborder_144.bmp
- %HOMEPATH%\desktop\applicantform_en.doc
- %HOMEPATH%\desktop\api-hashmap.html
- %HOMEPATH%\desktop\alert.htm
- %HOMEPATH%\desktop\adhd_and_obesity.docx
- %HOMEPATH%\desktop\adadsi.html
- %HOMEPATH%\desktop\about.htm
- %HOMEPATH%\desktop\sdksampleprivdeveloper.cer
- %HOMEPATH%\desktop\64bit_notes.htm
- %HOMEPATH%\desktop\contosoroot.cer
- %HOMEPATH%\desktop\weeklysheet1215.doc
- %TEMP%\rarsfx0\work.exe
- %TEMP%\rarsfx0\1.bat
- %TEMP%\rarsfx1\hesf.exe
- '95.#64.0.23':8000
- '95.#64.0.23':443
- http://95.###.0.23:8000/ws via 95.#64.0.23
- '95.#64.0.23':443
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- '%TEMP%\rarsfx0\work.exe' -priverdD
- '%TEMP%\rarsfx1\hesf.exe'
- '%WINDIR%\syswow64\cmd.exe' ver' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\1.bat" "
- '%WINDIR%\syswow64\cmd.exe' ver