Техническая информация
- '%PROGRAM_FILES%\s1\s1\kivaet.exe'
- '<SYSTEM32>\cmd.exe' /c ""%PROGRAM_FILES%\s1\s1\sidit.bat" "
- %PROGRAM_FILES%\s1\s1\kivaet.exe
- %PROGRAM_FILES%\s1\s1\vorona.jpg
- %HOMEPATH%\Recent\s1.lnk
- %HOMEPATH%\Recent\vorona.lnk
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %PROGRAM_FILES%\s1\s1\sidit.bat
- %PROGRAM_FILES%\s1\s1\p.txt
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- '46.##6.160.139':45612
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'