Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fi68818E41485' = '%HOMEPATH%\sy10848F52551\svchost.exe'
- '%HOMEPATH%\Patcher.exe'
- '%HOMEPATH%\sy10848F52551\svchost.exe'
- '<SYSTEM32>\cmd.exe' /c start %HOMEPATH%\Aimbot.exe && start %HOMEPATH%\Patcher.exe
- '%HOMEPATH%\Aimbot.exe'
- C:\svchost.exe
- %HOMEPATH%\sy10848F52551\OL.IYW
- %HOMEPATH%\tc50233Z72793.txt
- %HOMEPATH%\mz14613N74351.EV2
- %TEMP%\aut3.tmp
- %HOMEPATH%\Aimbot.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %HOMEPATH%\sy10848F52551\svchost.exe
- %HOMEPATH%\Patcher.exe
- %HOMEPATH%\Patcher.exe
- %HOMEPATH%\mz14613N74351.EV2
- %HOMEPATH%\tc50233Z72793.txt
- %HOMEPATH%\Aimbot.exe
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''