Техническая информация
- C:\ГЁГ¼þëµã÷¼°²âêô.exe
- C:\ГЁГ¼þëµã÷¼°²âêô.txt
- %TEMP%\nsadf57.tmp\system.dll
- %TEMP%\e_4\krnln.fnr
- %TEMP%\e_4\exmlrpc.fne
- %TEMP%\e_4\dp1.fne
- <PATH_SAMPLE>.txt
- %WINDIR%\syswow64\cborsevice.exe
- %WINDIR%\syswow64\cborsevice.dll
- C:\del_fiuvme.bat
- %WINDIR%\fonts\256929ed82496d99b81ba39e3dc7bea8.dat
- %TEMP%\_eviip.tmp
- %TEMP%\bclib\krnln.fnr
- %TEMP%\bclib\dp1.fne
- %TEMP%\bclib\exmlrpc.fne
- %TEMP%\bclib\krnln.fne
- %WINDIR%\syswow64\cborsevice.exe
- %WINDIR%\syswow64\cborsevice.dll
- %TEMP%\nsadf57.tmp\system.dll
- ClassName: 'Static' WindowName: ''
- 'C:\ГЁГ¼þëµã÷¼°²âêô.exe'
- '%WINDIR%\syswow64\cborsevice.exe'
- '%WINDIR%\syswow64\notepad.exe' C:\Г€Г¼þ˵Ã÷¼°²âÊÔ.txt
- '%WINDIR%\syswow64\cmd.exe' /c c:\del_fiuvme.bat (со скрытым окном)
- '%ProgramFiles%\internet explorer\iexplore.exe' -nohome (со скрытым окном)