Техническая информация
- '%ProgramFiles%\clock2004V1.40.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\7ZSfx000.cmd" "
- '%ProgramFiles%\svchost.exe'
- '%ProgramFiles%\Upload.exe'
- %TEMP%\~vis0000\miscdata.xyz
- %TEMP%\~vis0000\English.vlg
- %TEMP%\~vis0000\rebootnt.exe
- %TEMP%\~vis0000\default.bmp
- %TEMP%\~vis0000\uninst32.exe
- %ProgramFiles%\svchost.exe
- %ProgramFiles%\clock2004V1.40.exe
- %ProgramFiles%\Upload.exe
- %TEMP%\~vis0000\vise32ex.dll
- %TEMP%\7ZSfx000.cmd
- %TEMP%\7ZSfx000.cmd
- %TEMP%\~vis0000\miscdata.xyz
- %ProgramFiles%\Upload.exe в %TEMP%\_@1.tmp
- 'my.##maps.net':80
- http://my.##maps.net/api/report?ty###############
- DNS ASK my.##maps.net
- ClassName: 'Shell_TrayWnd' WindowName: ''