Техническая информация
- '%HOMEPATH%\retpp\yqeq.exe' 8990255.PFF
- '%APPDATA%\Temp.exe'
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\retpp\9198038.vbe"
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
- %HOMEPATH%\retpp\8990255.PFF
- %HOMEPATH%\retpp\71884.EGR
- %HOMEPATH%\retpp\9198038.vbe
- %HOMEPATH%\retpp\64040.OOP
- %HOMEPATH%\retpp\yqeq.exe
- %HOMEPATH%\retpp\9198038.vbe
- %HOMEPATH%\retpp\8990255.PFF
- %HOMEPATH%\retpp\64040.OOP
- %HOMEPATH%\retpp\yqeq.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe в %APPDATA%\Temp.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'