Техническая информация
- [HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'Wilder'sRansomware' = '<Полный путь к файлу>'
- %HOMEPATH%\desktop\000814251_video_01.avi
- %HOMEPATH%\desktop\nwfieldnotes1966.docx
- %HOMEPATH%\desktop\join.avi
- %HOMEPATH%\desktop\issi2013_template_for_posters.docx
- %HOMEPATH%\desktop\holycrosschurchinstructions.docx
- %HOMEPATH%\desktop\file_p_00000000_1371597592.docx
- %HOMEPATH%\desktop\fi51.doc
- %HOMEPATH%\desktop\thlps_keeper_mayer_1965.docx
- %HOMEPATH%\desktop\dashborder_192.bmp
- %HOMEPATH%\desktop\correct.avi
- %HOMEPATH%\desktop\coffee.bmp
- %HOMEPATH%\desktop\archer.avi
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
- %HOMEPATH%\desktop\adhd_and_obesity.docx
- %HOMEPATH%\desktop\about.html
- %HOMEPATH%\desktop\cveuropeo.doc
- %HOMEPATH%\desktop\tree_view.html
- %HOMEPATH%\desktop\000814251_video_01.avi.wilder
- %HOMEPATH%\desktop\about.html.wilder
- %HOMEPATH%\desktop\adhd_and_obesity.docx.wilder
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx.wilder
- %HOMEPATH%\desktop\archer.avi.wilder
- %HOMEPATH%\desktop\coffee.bmp.wilder
- %HOMEPATH%\desktop\correct.avi.wilder
- %HOMEPATH%\encrypt_date.txt