Техническая информация
- '%TEMP%\wupauqwctt.com' <Полный путь к вирусу>
- '<SYSTEM32>\ntvdm.exe' -f -i2
- '<SYSTEM32>\ntvdm.exe' -f -i1
- %TEMP%\uocmsaqasu.exe
- %WINDIR%\Temp\scs3.tmp
- %WINDIR%\Temp\scs4.tmp
- %WINDIR%\Temp\scs2.tmp
- %TEMP%\wupauqwctt.com
- %TEMP%\ywqbvryeuu.exe
- %WINDIR%\Temp\scs1.tmp
- %TEMP%\uocmsaqasu.exe
- %TEMP%\ywqbvryeuu.exe
- %TEMP%\wupauqwctt.com
- %WINDIR%\Temp\scs3.tmp
- %WINDIR%\Temp\scs4.tmp
- %WINDIR%\Temp\scs1.tmp
- %WINDIR%\Temp\scs2.tmp
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-b94.b98.390001'
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-b7c.b80.380001'