Техническая информация
- <SYSTEM32>\dmrremote.exe "<SYSTEM32>\c_100082.nls"
- <SYSTEM32>\at.exe 14:59 <SYSTEM32>\cmd.exe /c del /F /Q ""%TEMP%\ setup.exe""
- <SYSTEM32>\at.exe 13:12 /every:Th "<SYSTEM32>\dmrremote.exe"
- <SYSTEM32>\regsvr32.exe /s "<SYSTEM32>\iaasrad.dll"
- <SYSTEM32>\c_100082.nls
- <SYSTEM32>\dmrremote.exe
- <SYSTEM32>\3065\inf3065.dat
- <SYSTEM32>\iaasrad.dll
- %TEMP%\ setup.exe
- %TEMP%\ AxAudioConPlugin.1.0.0.125.exe
- %TEMP%\nsk3.tmp\modern-header.bmp
- %TEMP%\nsa2.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '#32770' WindowName: ''