Техническая информация
- %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_wp.exe
- %WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe
- %WINDIR%\microsoft.net\framework\v4.0.30319\ilasm.exe
- %WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe
- %WINDIR%\microsoft.net\framework\v4.0.30319\ngen.exe
- <SYSTEM32>\calc.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\notepad.exe
- wmplayer.exe
- %TEMP%\evb5cdf.tmp
- %TEMP%\evb5ec4.tmp
- '%ProgramFiles(x86)%\windows media player\wmplayer.exe'