Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\tabulations.vbs
- %WINDIR%\syswow64\svchost.exe
- %TEMP%\aut4206.tmp
- %TEMP%\springmaker
- %TEMP%\aut45df.tmp
- %TEMP%\chiffons
- %LOCALAPPDATA%\cocles\tabulations.exe
- %TEMP%\aut4b4d.tmp
- %TEMP%\aut4e3c.tmp
- %TEMP%\aut4206.tmp
- %TEMP%\aut45df.tmp
- %TEMP%\aut4b4d.tmp
- %TEMP%\aut4e3c.tmp
- '%LOCALAPPDATA%\cocles\tabulations.exe'
- '%WINDIR%\syswow64\svchost.exe'