Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\x64.lnk
- 'C:\Users\Default\AppData\Roaming\x64.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\ztmp\t24927.bat" "C:\Users\Default\AppData\Roaming\x64.exe" "
- %TEMP%\ztmp\t24927.bat
- %TEMP%\ztmp\t24979.exe
- C:\Users\Default\AppData\Roaming\vcredist_x64.exe
- C:\Users\Default\AppData\Roaming\x64.exe
- C:\Users\Default\AppData\Roaming\Data.bin
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''