Техническая информация
- '%TEMP%\ewbpp\smss.lYFxnJZJdJq' RpCw.RDW
- '%TEMP%\gbcld\mss.exe' 1
- '%TEMP%\gbcld\svchost.ploWMAXTZUs' ztCbaWDdh.FVB
- '<SYSTEM32>\mshta.exe'
- '<SYSTEM32>\taskkill.exe' /IM mshta.exe
- '<SYSTEM32>\wscript.exe' "%TEMP%\gbcld\rVyiYY.vbs"
- '<SYSTEM32>\wscript.exe' "%TEMP%\ewbpp\BNxHNcboDR.vbs"
- %TEMP%\ewbpp\smss.lYFxnJZJdJq
- %TEMP%\ewbpp\CWEthPtO.FKF
- %TEMP%\ewbpp\BNxHNcboDR.vbs
- %TEMP%\ewbpp\lhOZC.VMS
- %TEMP%\ewbpp\RpCw.RDW
- %TEMP%\gbcld\mss.exe
- %TEMP%\gbcld\svchost.ploWMAXTZUs
- %TEMP%\gbcld\fZpaSQJZnuPJ.PYR
- %TEMP%\gbcld\rVyiYY.vbs
- %TEMP%\gbcld\qTgdBDjJV.AGF
- %TEMP%\gbcld\ztCbaWDdh.FVB
- %TEMP%\ewbpp\smss.lYFxnJZJdJq
- %TEMP%\ewbpp\CWEthPtO.FKF
- %TEMP%\ewbpp\BNxHNcboDR.vbs
- %TEMP%\ewbpp\lhOZC.VMS
- %TEMP%\ewbpp\RpCw.RDW
- %TEMP%\gbcld\svchost.ploWMAXTZUs
- %TEMP%\gbcld\fZpaSQJZnuPJ.PYR
- %TEMP%\gbcld\rVyiYY.vbs
- %TEMP%\gbcld\qTgdBDjJV.AGF
- %TEMP%\gbcld\ztCbaWDdh.FVB
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'