Техническая информация
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath \"%TEMP%\nsiC66B.tmp\""
- %WINDIR%\syswow64\explorer.exe
- %TEMP%\nsic66b.tmp\nsexec.dll
- %TEMP%\nsic66b.tmp\ceyiha.46mb
- %TEMP%\nsic66b.tmp\praxalodwuy.exe
- %TEMP%\nsic66b.tmp\praxalodwuy.exe.config
- %TEMP%\nsic66b.tmp\selfdel.dll
- %TEMP%\nsic66b.tmp\ceyiha.46mb
- %TEMP%\nsic66b.tmp\nsexec.dll
- %TEMP%\nsic66b.tmp\praxalodwuy.exe
- %TEMP%\nsic66b.tmp\praxalodwuy.exe.config
- %TEMP%\nsic66b.tmp\selfdel.dll
- '%WINDIR%\syswow64\explorer.exe'
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -Command "Add-MpPreference -ExclusionPath \"%TEMP%\nsiC66B.tmp\"" (со скрытым окном)