Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\ceDQUQHDZPJI.lnk
- '<SYSTEM32>\wscript.exe'
- '%APPDATA%\TIQK.exe' "%APPDATA%\TIQKB.au3"
- <SYSTEM32>\wscript.exe
- %APPDATA%\TIQK.exe
- %APPDATA%\TIQKB.au3
- %TEMP%\aut1.tmp
- %TEMP%\fmqnkba
- %HOMEPATH%\WKvwAPAoMAe5sEbV\TIQKB.au3
- %HOMEPATH%\WKvwAPAoMAe5sEbV\TIQK.exe
- %TEMP%\fmqnkba
- %TEMP%\aut1.tmp
- %APPDATA%\TIQK.exe в %HOMEPATH%\WKvwAPAoMAe5sEbV\TIQK.exe
- %APPDATA%\TIQKB.au3 в %HOMEPATH%\WKvwAPAoMAe5sEbV\TIQKB.au3
- '23.##5.131.185':3583
- ClassName: 'Shell_TrayWnd' WindowName: ''