Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Server.exe
- '%TEMP%\iconsext.exe'
- '<SYSTEM32>\wscript.exe' "%TEMP%\b64.vbs"
- %TEMP%\aut2.tmp
- %TEMP%\iconsext.exe
- %TEMP%\aut1.tmp
- %TEMP%\b64.vbs
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'