Техническая информация
- '%TEMP%\13054778291140625067.exe'
- '%TEMP%\nsu3.tmp\ns8.tmp' wmic /NAMESPACE:\\root\SecurityCenter2 path AntiVirusProduct get displayName
- '%TEMP%\nsu3.tmp\ns4.tmp' wmic /NAMESPACE:\\root\SecurityCenter path AntiVirusProduct get displayName
- '%TEMP%\13054778291140625067.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wbem\wmic.exe' /NAMESPACE:\\root\SecurityCenter2 path AntiVirusProduct get displayName
- '<SYSTEM32>\wbem\wmic.exe' /NAMESPACE:\\root\SecurityCenter path AntiVirusProduct get displayName
- <Текущая директория>\TempWmicBatchFile.bat
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- <SYSTEM32>\wbem\Logs\WMIC.LOG
- C:\END
- %TEMP%\13054778291140625067.exe
- %TEMP%\tmp5.tmp
- %TEMP%\nsd2.tmp
- %TEMP%\tmp6.tmp
- %TEMP%\tmp7.tmp
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\tmp7.tmp
- %TEMP%\tmp6.tmp
- %TEMP%\tmp5.tmp
- 'in######r.jdownloader.org':80
- in######r.jdownloader.org/feed_13054778291140625067/2434/1/windows/0/jdownloader2/OK/1
- in######r.jdownloader.org/feed_13054778291140625067/2434/windows/XP/32/0/jdownloader2/OK/1
- in######r.jdownloader.org/rand_13054778291140625067/2434/1/windows/32/_Code0x8004100e_DescriptionInvalidnamespace_FacilityWMI_/0/jdownloader2
- in######r.jdownloader.org/feed_13054778291140625067/2434/windows/0/jdownloader2/OK/1
- DNS ASK in######r.jdownloader.org
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''