Техническая информация
- '%TEMP%\V2011\svchost.exe' /pid=4052
- '%TEMP%\V2011\svchost.exe' /pid=2472
- '%TEMP%\V2011\svchost.exe' /pid=1124
- '%TEMP%\V2011\svchost.exe' /pid=356
- '%TEMP%\V2011\svchost.exe' /pid=4076
- '%TEMP%\V2011\svchost.exe' /pid=2740
- '%TEMP%\V2011\svchost.exe' /pid=252
- '%TEMP%\V2011\svchost.exe' /pid=2424
- '%TEMP%\V2011\svchost.exe'
- '<SYSTEM32>\123.exe'
- '%TEMP%\V2011\svchost.exe' /pid=3992
- '%TEMP%\V2011\svchost.exe' /pid=2516
- '%TEMP%\V2011\svchost.exe' /c afc9fe2f418b00a0.bat
- '<SYSTEM32>\taskmgr.exe'
- '<SYSTEM32>\cmd.exe' /c afc9fe2f418b00a0.bat
- <SYSTEM32>\cmd.exe
- %WINDIR%\V2013.exe
- <Текущая директория>\afc9fe2f418b00a0.bat
- %WINDIR%\V2012.exe
- <SYSTEM32>\123.exe
- %TEMP%\V2011\svchost.exe
- <SYSTEM32>\123.exe
- '12#.#18.173.56':10086
- ClassName: '' WindowName: 'Windows Task Manager'
- ClassName: '(null)' WindowName: 'Windows ??????????'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'