Техническая информация
- '%TEMP%\nsh6.tmp\data2.exe'
- '%TEMP%\nsk3.tmp\data2.exe'
- '%TEMP%\nsk3.tmp\patch.exe'
- '<SYSTEM32>\net1.exe' stop wscsvc
- '<SYSTEM32>\net.exe' stop wscsvc
- %TEMP%\nsh5.tmp
- %TEMP%\nsh6.tmp\data2.exe
- <SYSTEM32>\MSINET.OCX
- %ALLUSERSPROFILE%\Application Data\Sunbelt\AntiMalware\RegistrationConfig.xml
- %TEMP%\nsq2.tmp
- %TEMP%\nsk3.tmp\patch.exe
- %TEMP%\nsk3.tmp\data2.exe
- %TEMP%\nsh6.tmp\data2.exe
- %TEMP%\nsk3.tmp\patch.exe
- %TEMP%\nsk3.tmp\data2.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'