Техническая информация
- '<SYSTEM32>\fvdnotify.exe'
- '%WINDIR%\ehome\eventkey.exe'
- '%WINDIR%\ehome\mediahost.exe'
- '%WINDIR%\Microsoft.NET\NETFX.exe'
- '<SYSTEM32>\schtasks.exe' /create /sc daily /du 05:00 /ri 25 /f /tn "Microsoft\Windows\Microsoft.NET\Framework\NETFXSBS" /tr "%WINDIR%\Windows\Microsoft.NET\Framework\NETFXSBS.exe"
- '<SYSTEM32>\schtasks.exe' /create /sc daily /du 04:00 /ri 30 /f /tn "Microsoft\Windows\System\fvdnotify" /tr "<SYSTEM32>\fvdnotify.exe"
- '<SYSTEM32>\schtasks.exe' /create /sc daily /du 05:00 /ri 35 /f /tn "Microsoft\Windows\System\Notifycation\LocationNotification" /tr "%WINDIR%\Windows\System32\LocationNotification.exe"
- '<SYSTEM32>\schtasks.exe' /create /sc daily /du 04:00 /ri 10 /f /tn "Microsoft\Windows\Multimedia\mediahost" /tr "%WINDIR%\ehome\mediahost.exe"
- '<SYSTEM32>\schtasks.exe' /create /sc daily /du 05:00 /ri 15 /f /tn "Microsoft\Windows\Location\splwow86" /tr "%WINDIR%\splwow86.exe"
- '<SYSTEM32>\schtasks.exe' /create /sc daily /du 04:00 /ri 20 /f /tn "Microsoft\Windows\Microsoft.NET\NETFX" /tr "%WINDIR%\Microsoft.NET\NETFX.exe"
- %PROGRAM_FILES%\module\0.txt
- %WINDIR%\ehome\eventkey.exe
- %TEMP%\config_content3.sec
- %TEMP%\log_DFsdeDFGs.txt
- %TEMP%\eventkey.bat
- <SYSTEM32>\LocationNotification.exe
- %WINDIR%\splwow86.exe
- %WINDIR%\ehome\mediahost.exe
- %WINDIR%\Microsoft.NET\NETFX.exe
- <SYSTEM32>\fvdnotify.exe
- %WINDIR%\Microsoft.NET\Framework\NETFXSBS.exe
- DNS ASK sm#.#yftp.org
- DNS ASK www.google.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'