Техническая информация
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\cmd.exe' /c "%APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_246307206.bat"
- '<SYSTEM32>\attrib.exe' +a +r +s +h C:\RECYCLER\desktop.ini
- '<SYSTEM32>\cmd.exe' /c "%APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_386836022.bat"
- '<SYSTEM32>\cmd.exe' /c "%APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_519023114.bat"
- '<SYSTEM32>\attrib.exe' +a +r +s +h C:\RECYCLER\DiskWriteAuthTest.tmp
- C:\RECYCLER\desktop.ini
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_519023114.end
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_246307206.end
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_246307206.bat
- C:\RECYCLER\DiskWriteAuthTest.tmp
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_386836022.bat
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_519023114.bat
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_386836022.end
- C:\RECYCLER\desktop.ini
- C:\RECYCLER\DiskWriteAuthTest.tmp
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_246307206.bat
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_246307206.end
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_386836022.bat
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_386836022.end
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_519023114.bat
- %APPDATA%\jplopsoft\shelldos\shelldos_temp_999999999_155_519023114.end
- ClassName: 'Shell_TrayWnd' WindowName: ''