Техническая информация
- '<SYSTEM32>\dumprep.exe' 1664 -dm 7 7 %TEMP%\WER12f3.dir00\ctfmon.exe.mdmp 16325836412027256
- '<SYSTEM32>\dumprep.exe' 1664 -dm 7 7 %TEMP%\WER12f3.dir00\ctfmon.exe.hdmp 16325836412027276
- '<SYSTEM32>\schtasks.exe' /Create /TN "Update\Update" /XML "%TEMP%\1575012367.xml"
- '%HOMEPATH%\Start Menu\Programs\filename.exe'
- '<SYSTEM32>\schtasks.exe' /Delete /TN "Update\Update" /F
- <SYSTEM32>\svchost.exe
- ZONEALARM.EXE
- ashAvast.exe
- BBClient.exe
- lin.bin
- bc_loader.exe
- tiny.exe
- lotroclient.exe
- rclient.exe
- ZONEALARM.EXE
- httplook.exe
- gw.exe
- bankcl.exe
- client7.exe
- InphaseNXD.exe
- sgbclient.exe
- bk.exe
- Mir3Game.exe
- avgcc.exe
- el_cli.ex
- AVGCC32.EXE
- translink.exe
- bclient.exe
- maplestory.exe
- AVGCTRL.EXE
- magent.exe
- startclient7.exe
- MCAGENT.EXE
- ashAvSrv.exe
- %ProgramFiles%\Client\client.exe
- %TEMP%\WER12f3.dir00\ctfmon.exe.mdmp
- %HOMEPATH%\Start Menu\Programs\filename.exe
- %TEMP%\1575012367.xml
- %TEMP%\1575012367.xml
- '46.##3.223.14':7055