Техническая информация
- '%WINDIR%\syswow64\taskkill.exe' /f /im TickTick.exe
- %TEMP%\rarsfx0\64.exe
- %TEMP%\rarsfx0\crack.7z
- %TEMP%\rarsfx0\cybermania.url
- %TEMP%\rarsfx0\tick_win_setup_release_x64.exe
- %TEMP%\is-4d5nt.tmp\tick_win_setup_release_x64.tmp
- %TEMP%\is-85h40.tmp\_isetup\_setup64.tmp
- ClassName: 'EDIT' WindowName: ''
- ClassName: '' WindowName: ''
- '%TEMP%\rarsfx0\tick_win_setup_release_x64.exe' /silent
- '%TEMP%\is-4d5nt.tmp\tick_win_setup_release_x64.tmp' /SL5="$10252,20154228,1145856,%TEMP%\RarSFX0\tick_win_setup_release_x64.exe" /silent
- '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im TickTick.exe (со скрытым окном)