Техническая информация
- '%TEMP%\afolder\nx3.exe'
- '%TEMP%\afolder\nx1.exe'
- '%TEMP%\afolder\nx.exe'
- '%TEMP%\afolder\nx4.exe'
- '%TEMP%\afolder\nx7.exe'
- '%TEMP%\afolder\nx6.exe'
- '%TEMP%\afolder\nx5.exe'
- '<SYSTEM32>\attrib.exe' /pid=1544
- '<SYSTEM32>\attrib.exe' /c cls
- '<SYSTEM32>\attrib.exe' +h %TEMP%\ztmp
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\attrib.exe
- %TEMP%\afolder\nx2.exe
- %TEMP%\ztmp\tmp60881.bat
- %TEMP%\ztmp\tmp61401.exe
- %TEMP%\afolder\nx3.exe
- %TEMP%\ztmp\tmp47501.bat
- %TEMP%\ztmp\tmp48791.exe
- %TEMP%\afolder\nx.exe
- %TEMP%\ztmp\tmp77111.bat
- %TEMP%\ztmp\tmp73061.exe
- %TEMP%\afolder\nx1.exe
- %TEMP%\ztmp\tmp80591.bat
- %TEMP%\ztmp\tmp55391.exe
- %TEMP%\afolder\nx6.exe
- %TEMP%\ztmp\tmp43561.bat
- %TEMP%\ztmp\tmp10761.exe
- %TEMP%\afolder\nx7.exe
- %TEMP%\ztmp\tmp43931.bat
- %TEMP%\ztmp\tmp44451.exe
- %TEMP%\afolder\nx4.exe
- %TEMP%\ztmp\tmp67921.bat
- %TEMP%\ztmp\tmp40431.exe
- %TEMP%\afolder\nx5.exe
- %TEMP%\ztmp\tmp73451.bat
- %TEMP%\ztmp\tmp73941.exe
- %TEMP%\ztmp\tmp60881.bat
- %TEMP%\ztmp\tmp61401.exe
- %TEMP%\ztmp\tmp48791.exe
- %TEMP%\afolder\nx2.exe
- %TEMP%\afolder\nx.exe
- %TEMP%\ztmp\tmp73061.exe
- %TEMP%\afolder\nx1.exe
- %TEMP%\ztmp\tmp55391.exe
- %TEMP%\afolder\nx3.exe
- %TEMP%\afolder\nx6.exe
- %TEMP%\ztmp\tmp10761.exe
- %TEMP%\afolder\nx7.exe
- %TEMP%\ztmp\tmp44451.exe
- %TEMP%\afolder\nx4.exe
- %TEMP%\ztmp\tmp40431.exe
- %TEMP%\afolder\nx5.exe
- %TEMP%\ztmp\tmp73941.exe